Re: Win 2000 User cannt authorize
At 04:41 PM 8/21/2002 +0200, you wrote: >>Do you use PAP authentication on your network with the test-user >>attempting CHAP authentication? Or is there some reason why CHAP would >>work for you and not your test user? Look for differences in DUN/PPP >>configurations between the two PC's (the one that can connect and the one >>that cannot). > >Yes i use PAP authentication, but the user have already set up a PAP >authentication instead CHAP. >But wth do the Client a CHAP authentication ? > >>>What's really crazy is, that after disabling the radius and enabling the >>>RAS he can't connect too. >>>Any idea what might be the cause of this strange behavior. >> >>If the RADIUS server is disabled...the user cannot authenticate. >no the user can be authenticate via the RAS too. I did not know you had such an option enabled. If the user can be authenticated via the RAS and still fails, yet you can connect via RAS authentication and RADIUS authentication (with the same user-name/pass I'm assuming) then there is probably some sort of DUN configuration problem. Go through the DUN settings. Win2K sets default settings that are usually NOT appropriate for most PPP connections. For example, with Max 6000's, the Win2K DUN default setting "Nogotiate multi-link for single link connections" causes problems. Such a setting may be producing the error 43...even though that is not the actual disconnect-cause. Have the user dial-up using a terminal window. A more helpful error may be sent from the RAS directly to the user. Also...sorry, but I don't understand the question, "But wth do the Client a CHAP authentication ?" Could you rephrase the question if DUN troubleshooting does not resolve the issue? Hope that helps, Chris - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Win 2000 User cannt authorize
At 16:09 21.08.2002, you wrote: >At 03:52 PM 8/21/2002 +0200, you wrote: >>Hello, >> >>after my konfiguration and implementation of the radiusd in the company >>network, i am now in the test phase. >>A test user got the problem that his Win2k SP 3 Client cannt connect to >>the radius server, though his user profile/passwd >>works well on my pc. >>The accounting got the X-Ascend-Disconnect-Cause: 43 failure, but what >>does 43 mean? > >The "43" disconnect cause is: PPP CHAP authentication failed. > >Do you use PAP authentication on your network with the test-user >attempting CHAP authentication? Or is there some reason why CHAP would >work for you and not your test user? Look for differences in DUN/PPP >configurations between the two PC's (the one that can connect and the one >that cannot). Yes i use PAP authentication, but the user have already set up a PAP authentication instead CHAP. But wth do the Client a CHAP authentication ? >>What's really crazy is, that after disabling the radius and enabling the >>RAS he can't connect too. >>Any idea what might be the cause of this strange behavior. > >If the RADIUS server is disabled...the user cannot authenticate. no the user can be authenticate via the RAS too. regards Adam - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Win 2000 User cannt authorize
At 03:52 PM 8/21/2002 +0200, you wrote: >Hello, > >after my konfiguration and implementation of the radiusd in the company >network, i am now in the test phase. >A test user got the problem that his Win2k SP 3 Client cannt connect to >the radius server, though his user profile/passwd >works well on my pc. >The accounting got the X-Ascend-Disconnect-Cause: 43 failure, but what >does 43 mean? The "43" disconnect cause is: PPP CHAP authentication failed. Do you use PAP authentication on your network with the test-user attempting CHAP authentication? Or is there some reason why CHAP would work for you and not your test user? Look for differences in DUN/PPP configurations between the two PC's (the one that can connect and the one that cannot). >What's really crazy is, that after disabling the radius and enabling the >RAS he can't connect too. >Any idea what might be the cause of this strange behavior. If the RADIUS server is disabled...the user cannot authenticate. Chris - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html