MSCHAP issue - [mschap] FAILED: MS-CHAP2-Response is incorrect

2010-10-06 Thread jon michaels
Hi, I am attempting to replicate a test setup into production and somewhere along the way I must have forgotten something. I have an NT-Password stored in a mysql database and currently get the following response from freeradius upon authenticating: rad_recv: Access-Request packet from host

Re: Auth-Type

2009-12-07 Thread jon michaels
Thanks for the quick response. On Mon, Dec 7, 2009 at 11:33 AM, Alan DeKok al...@deployingradius.com wrote: jon michaels wrote: My NAS, pppd, does not grant access to a user with attribute Auth-Type set to Accept but radtest does work. Perhaps i should also mention that without Auth-Type set

Re: Auth-Type

2009-12-07 Thread jon michaels
On Mon, Dec 7, 2009 at 12:31 PM, Alan Buxey a.l.m.bu...@lboro.ac.uk wrote: quite easy - you are forcing an access-accept on the initial packet and you rNAS wont take that - it needs to offer the full challenge-response and not just get a 'yes yes let them on'. if you remove that part where

Re: Auth-Type

2009-12-07 Thread jon michaels
Ok, i figured it out. I can change between Reject and MSCAP and it will work. On Mon, Dec 7, 2009 at 12:55 PM, jon michaels joniama...@gmail.com wrote: On Mon, Dec 7, 2009 at 12:31 PM, Alan Buxey a.l.m.bu...@lboro.ac.uk wrote: quite easy - you are forcing an access-accept on the initial packet

Auth-Type

2009-12-06 Thread jon michaels
Hi, First i want to say that i think that freeradius is a great piece of software. My NAS, pppd, does not grant access to a user with attribute Auth-Type set to Accept but radtest does work. Could this be solved by recompiling pppd with the dictionary file included in the source that reads VALUE

Creating an NT-Password value with python

2009-11-21 Thread jon michaels
Hi list, I am trying to figure out how to create an NT-Password hash for the authentication database using python. I found the package python_ntlm which seems to be able to do the job. http://code.google.com/p/python-ntlm/source/browse/trunk/python26/ntlm/ntlm.py I think it needs a modification

Re: Creating an NT-Password value with python

2009-11-21 Thread jon michaels
Thanks for your quick response, Bjørn. On Sat, Nov 21, 2009 at 4:09 PM, Bjørn Mork bj...@mork.no wrote: I then proceed to add the user in mysql: insert into radcheck (username,attribute,value,op) values ('testuser','NT-Password','\xdb4mi\x1dz\xccM\xc2b]\xb1\x9f\x9e?R',':='); You'll have to

Re: Creating an NT-Password value with python

2009-11-21 Thread jon michaels
On Sat, Nov 21, 2009 at 6:15 PM, jon michaels joniama...@gmail.com wrote: However, I didn't manage to authenticate either of the two. It seems that so far radius likes the value enough to not complain that its invalid. Is the format correct, or is there something else i need to change in my

Re: Creating an NT-Password value with python

2009-11-21 Thread jon michaels
On Sat, Nov 21, 2009 at 10:08 PM, Alan DeKok al...@deployingradius.com wrote:  Use the hex version of the password:        NT-Password := 0x0102030405060708...  Alan DeKok. Thanks, that worked like a charm. As it turns out, i don't even need python_ntlm for more than the right line of code.