Paul Thornton wrote: > I've got a problem which I now know isn't FreeRADIUS misbehaving but > seems to be some CHAP-related issue, but I can't see what. With > advanced apologies for being somewhat off-topic, I'm wondering if anyone > has any ideas?
It isn't a CHAP issue. Read the debug output. There's no CHAP in the request. > In my test setup, all attempts to use CHAP or MSCHAP-v2 for > authentication fail, basically because there is no CHAP challenge or > password sent with the Access-Request. Not unreasonably, the radius > server rejects the request: No. The request has no CHAP or MS-CHAP attributes in it. So of *course* authentication fails. You can't authenticate someone if they don't supply authentication credentials. > I've also set up a FreeBSD PPPoE server to check that this wasn't a > client-side problem; It's the fault of the RADIUS client. RADIUS clients decide what goes into a request. If the request is missing something, blame the client. > Has anyone had a similar problem or can suggest anything? I've been > going around in circles here all day and ended up going nowhere. Fix the PPP server so that it works. This isn't a FreeRADIUS problem. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html