Hi again! Now , after deleting theese lines :
( >> TEST Auth-Type := CHAP >> TEST Password == TEST987 ) I've got the following : rlm_sql (sql): No matching entry in the database for request from user [TEST] modcall[authorize]: module "sql" returns notfound for request 0 modcall: leaving group authorize (returns ok) for request 0 rad_check_password: Found Auth-Type CHAP auth: type "CHAP" Processing the authenticate section of radiusd.conf modcall: entering group CHAP for request 0 rlm_chap: login attempt by "TEST" with CHAP password rlm_chap: Could not find clear text password for user TEST modcall[authenticate]: module "chap" returns invalid for request 0 modcall: leaving group CHAP (returns invalid) for request 0 Then after changing the operator to ":=" I've got again : rlm_sql (sql): Released sql socket id: 4 modcall[authorize]: module "sql" returns ok for request 0 modcall: leaving group authorize (returns ok) for request 0 rad_check_password: Found Auth-Type CHAP auth: type "CHAP" Processing the authenticate section of radiusd.conf modcall: entering group CHAP for request 0 rlm_chap: login attempt by "TEST" with CHAP password rlm_chap: Using clear text password "TEST987" for user TEST authentication. rlm_chap: Password check failed modcall[authenticate]: module "chap" returns reject for request 0 modcall: leaving group CHAP (returns reject) for request 0 auth: Failed to validate the user. Login incorrect (rlm_chap: Wrong user password): [TEST/<CHAP-Password>] (from client localhost port 8 cli 00:E0:91:14:52:C3) Delaying request 0 for 1 seconds THe pppoe client's are mainly windows XP , windows Vista, linux, 3com, cisco and netgear routers as well as the pppoe-server is residing locally on the same machine as freeradius (that stores everything in mysql on the other machine but that's not a clue) - none of them can authenticate so i cant'believe it's th broken ppp client . I've read FAQ,docs and list and have no other clues ... MAYBE the thing is that i have only TWO tables - racheck and radreply (without ragroups etc...) and modified sql.conf to use queries for radcheck and radreply ONLY... maybe this is the problem ? (but i cant see the relevant error message ) Regards and thank You for Your time. WZ Dnia Śr Września 26 2007, 2:01 am, Alan DeKok napisał(a): > Wojciech Ziniewicz wrote: >> For the last few days I am trying to switch to CHAP authentication. >> I've made proper changes to radiusd.conf and pppoe-server to demand CHAP >> auth from users and here's what I get. >> >> Here's what we've got in the database : >> >> RADCHECK : >> >> TEST Cleartext-password := TEST987 >> TEST Auth-Type := CHAP >> TEST Password == TEST987 > > Delete the last two entries. They're wrong. > > >> b) And fragment from the radius debug mode : >> >> rad_recv: Access-Request packet from host 127.0.0.1:3458, id=144, >> length=88 > ... >> User-Name = "TEST" >> CHAP-Password = 0xdf6fe5d7a573bff814452731ef01f044df > ... >> rlm_chap: Using clear text password "TEST987" for user TEST >> authentication. >> rlm_chap: Password check failed > > That should work. If it doesn't, odds are that the PPP client is > broken. > > Alan DeKok. > > -- Pozdrawiam, Wojciech Ziniewicz Administrator Cebit - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html