Jonas Fornander wrote: > We have successfully installed and tested FreeRadius. > > However authentication fails when we try with a live customer. .. > [chap] Cleartext-Password is required for authentication
That should be pretty clear. > This is the entry we have for the customer in the users file: > > 3108396...@netwood.net Cleartext-Password := "testing123" > > Any advice is greatly appreciated. Well... it wasn't found in the "users" file. It's impossible to know what really happened, because you helpfully deleted all of the useful information from the debug log. Alan DeKok. [jonas] Below is the whole log for that connection attempt. Ready to process requests. rad_recv: Access-Request packet from host 64.105.132.249 port 1814, id=116, length=294 User-Name = "3108396...@netwood.net" CHAP-Password = 0x01c0dd7a2fa7e1d41a9fbafbfc04a227e3 CHAP-Challenge = 0x34c09a5e9141f29c9d7cae2f2066f379 Service-Type = Framed-User Framed-Protocol = PPP NAS-Identifier = "lsanca54-seb3" NAS-Port = 67371072 NAS-Real-Port = 1140850918 NAS-Port-Type = Virtual NAS-Port-Id = "4/4 vpi-vci 0 230 pppoe 345" Medium-Type = DSL Mac-Addr = "58-6d-8f-3e-7e-40" Connect-Info = "covad" Platform-Type = SmartEdge-800 OS-Version = "6.1.5.6" Acct-Session-Id = "0303003F28004E4F-502C6F45" Framed-IP-Address = 68.167.6.182 NAS-IP-Address = 66.166.60.137 Message-Authenticator = 0xa4c9ddcd035e84cf48dd06f771b57593 Proxy-State = 0x313932 # Executing section authorize from file /etc/freeradius/sites-enabled/default +- entering group authorize {...} ++[preprocess] returns ok [chap] Setting 'Auth-Type := CHAP' ++[chap] returns ok : ++[pap] returns noop Found Auth-Type = CHAP # Executing group from file /etc/freeradius/sites-enabled/default +- entering group CHAP {...} [chap] login attempt by "3108396...@netwood.net" with CHAP password [chap] Cleartext-Password is required for authentication ++[chap] returns invalid Failed to authenticate the user. Login incorrect (rlm_chap: Clear text password not available): [3108396...@netwood.net/<CHAP-Password>] (from client LosAngeles port 67371072) Using Post-Auth-Type Reject # Executing group from file /etc/freeradius/sites-enabled/default +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> 3108396...@netwood.net attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 0 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 0 Sending Access-Reject of id 253 to 64.105.132.249 port 1814 Proxy-State = 0x313838 Waking up in 4.9 seconds. Cleaning up request 0 ID 253 with timestamp +9726 Ready to process requests. //jonas - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html