Re: CHAP-Challenge Question

2011-03-11 Thread Jeremiah



   Yes.  Unless the user entered the wrong password.  Or, the NAS does
the CHAP algorithm incorrectly.



Thanks .. we were able to track down an issue with the way the NAS was 
getting the password.


Jeremiah
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: CHAP-Challenge Question

2011-03-10 Thread Alan DeKok
Jeremiah wrote:
 When a request comes in from the Tik , it adds a CHAP challenge and the
 Chap password obviously is differejt and the request fails.

  The CHAP-Challenge is a random number.  The CHAP-Password depends on
the real password, and the random number.  It should *always* be
different for every packet.

 What basic element am I failing to understand?  If the chap challenge
 string is sent in, should freeradius be able to use that with the
 chap-password to accept the user?

  Yes.  Unless the user entered the wrong password.  Or, the NAS does
the CHAP algorithm incorrectly.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html