<[EMAIL PROTECTED]> wrote:
> I feel I should stress the following:
> 
> - I have read the contents of the /doc folder.
...

  <g>  That's a good start, but often not enough.

> users
> ====================
> [EMAIL PROTECTED]       User-Password == "USER1-BLAH"

  Which line is that entry on?

> Output of radiusd -X
...
>     users: Matched entry DEFAULT at line 155
>     users: Matched entry DEFAULT at line 175
>     users: Matched entry DEFAULT at line 187

  I'll bet $$ that the entry for that user is NOT on line 155, 175, or
on 187.

  So the answer is that CHAP is't working because it doesn't know the
clear-text password.  It doesn't know the clear-text password because
that entry of the users file wasn't matched.  That entry of the users
file wasn't matched for reasons which aren't clear in the debug log.

  My suggestion is to simplify the test even more.  Avoid realms
entirely.  Use just a plain user named "user", with password "user".
If that works for CHAP (and it should), then make the test more
complicated until it breaks.  You'll then know what is causing the
problem, which goes a long way to fixing it.

  Alan DeKok.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to