MS-CHAPv2 change password not working in master

2012-11-16 Thread Carlos Velasco
response to client [2012/11/16 10:39:20.856674, 6] winbindd/winbindd.c:842(winbind_client_request_read) closing socket 25, client exited === Regards, Carlos Velasco - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: MS-CHAPv2 change password not working in master

2012-11-16 Thread Carlos Velasco
Looking into code I suppose the problem is something with the old NT hash, but not an expert here. Any help would be apreciated. Adding some debug to code, this seems really wrong: (1) mschap-vpn_nimas_tk : old_nt_hash: 3497295200 || Write buf: old-nt-hash-blob:

Re: MS-CHAPv2 change password not working in master

2012-11-16 Thread Carlos Velasco
On 11/16/2012 10:00 AM, Carlos Velasco wrote: windows popup in Cisco VPN client, but the change password process fails: ntlm_auth said: Password-Change: No Password-Change-Error: Wrong Password . . Looking into code I suppose the problem is something with the old NT hash, but not an expert

Re: MS-CHAPv2 change password not working in master

2012-11-16 Thread Carlos Velasco
On 11/16/2012 11:27 AM, Carlos Velasco wrote: According to RFC2548, after 0x0701 should be the Encrypted-Hash 16 octects, but they are all 00. I am trying to find out why, seems a bug in Cisco part. But I think this works fine with Cisco ACS radius. :S The CPW packet lets you send

Re: MS-CHAPv2 change password not working in master

2012-11-16 Thread Carlos Velasco
On 16/11/12 11:43, Carlos Velasco wrote: I don't see LM hashes allowed in the Radius attributes for password change. Don't seem Cisco using them. Sorry yes ignore me; I'm being dumb. Ok. After further findings... it is a bug in Cisco IOS router version 15.1M. Downgrading to 15.0M works