How to access Chap-Password

2013-04-19 Thread Mehdi Ravanbakhsh
Hi All how i can access chap password in site-available ? i use %{%{User-Password}:- Chap-Password} but if user use chap for AUTH i just get Chap-Password . Best regards. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

How to access Chap-Password

2013-04-19 Thread Mehdi Ravanbakhsh
Hi All how i can access chap password in site-available ? i use %{%{User-Password}:- Chap-Password} but if user use chap for AUTH i just get Chap-Password . - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: How to access Chap-Password

2013-04-19 Thread Arran Cudbard-Bell
On 19 Apr 2013, at 16:30, Mehdi Ravanbakhsh baba...@gmail.com wrote: Hi All how i can access chap password in site-available ? i use %{%{User-Password}:- Chap-Password} but if user use chap for AUTH i just get Chap-Password . *sigh* %{%{User-Password}:-%{Chap-Password}} Arran

Re: How to access Chap-Password

2013-04-19 Thread Mehdi Ravanbakhsh
many thanks aran On 4/20/13, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: On 19 Apr 2013, at 16:30, Mehdi Ravanbakhsh baba...@gmail.com wrote: Hi All how i can access chap password in site-available ? i use %{%{User-Password}:- Chap-Password} but if user use chap for AUTH i just

Re: How to access Chap-Password

2013-04-19 Thread Mehdi Ravanbakhsh
...@freeradius.org wrote: On 19 Apr 2013, at 16:30, Mehdi Ravanbakhsh baba...@gmail.com wrote: Hi All how i can access chap password in site-available ? i use %{%{User-Password}:- Chap-Password} but if user use chap for AUTH i just get Chap-Password . *sigh* %{%{User-Password}:-%{Chap-Password

Re: How to access Chap-Password

2013-04-19 Thread Arran Cudbard-Bell
-Password attribute, that's the point. If you have access to a reference copy of the user's password the server can perform the same hashing, and compare the output with the value provided in CHAP-Password. -Arran Arran Cudbard-Bell a.cudba...@freeradius.org FreeRADIUS Development Team - List info

Chap Password example?

2011-06-14 Thread jenny
Hello, I have some enquiry on CHAP-Password for authentication. I'm trying to using CHAP-Password using freeradius client. Trying to look for some example but it seems there's no much example code i can use as a reference. Just wondering how can i do that? initially, i'm using PW_USER_PASSWORD

Re: Unable to perform CHAP Authentication: after modifying client with CHAP-Password.

2010-07-27 Thread Alan DeKok
Santosh Kumar wrote: Need help for modifying the radius client or updating for CHAP authentication, You need to do the CHAP calculations. See the RFC's for details. Modified the below attribute, instead of PW_USER_PASSWORD to PW_CHAP_PASSWORD, but its rejecting please do know if i'm wrong

Unable to perform CHAP Authentication: after modifying client with CHAP-Password.

2010-07-26 Thread Santosh Kumar
)it works fine. Have verified by command line it works fine, $echo User-Name=steve,CHAP-Password=testing,Framed-Protocol=PPP | radclient localhost:1812 auth testing123 ---Code snippet-- /*if (rc_avpair_add(rh, send, PW_USER_PASSWORD, passwd, -1, 0) == NULL) return ERROR_RC

Re: rlm_sql error, can't expand User-Password and Chap-Password, help me !

2010-04-23 Thread VU VAN HUNG
: %{Chap-Password} - * no information about User-Password and Chap-Password, and the query, I hope I'm not completely wrong here but this is probably because you're using EAP not PAP or CHAP so these attributes are not set. which insert into radpostauth, is error. I dont know why. Do you

Re: rlm_sql error, can't expand User-Password and Chap-Password, help me !

2010-04-23 Thread szymon roczniak
could connect to wireless network successfully. But I still dont know how to configure Radius Server using PAP and CHAP instead of EAP, because I explore my In order to have PAP or CHAP working you need your NAS to send either User-Password or CHAP-Password attribute. If you look at your log file

Re: rlm_sql error, can't expand User-Password and Chap-Password, help me !

2010-04-23 Thread VU VAN HUNG
szymon roczniak wrote: In order to have PAP or CHAP working you need your NAS to send either User-Password or CHAP-Password attribute. If you look at your log file again you'll see that both the pap and the chap module return noop, this is because these attributes are not present in the query

Re: rlm_sql error, can't expand User-Password and Chap-Password, help me !

2010-04-23 Thread Alan DeKok
VU VAN HUNG wrote: How do I make NAS send User-Password or CHAP-Password attribute ? Read the NAS documentation. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

rlm_sql error, can't expand User-Password and Chap-Password, help me !

2010-04-22 Thread VU VAN HUNG
Hi all, This is my first post. I'm trying to make a AAA server based on freeRadius and MySQL. After I configure radius server and run server in debug mode, I get some problem with rlm_sql about User-Password and Chap-Password. It seems that the server can't expand User-Password and Chap

Re: rlm_sql error, can't expand User-Password and Chap-Password, help me !

2010-04-22 Thread szymon roczniak
( '%{User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S') - INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'hung

Re: rlm_sql error, can't expand User-Password and Chap-Password, help me !

2010-04-22 Thread VU VAN HUNG
( '%{User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S') - INSERT INTO radpostauth (username, pass, reply, authdate) VALUES

Re: rlm_sql error, can't expand User-Password and Chap-Password, help me !

2010-04-22 Thread szymon roczniak
On Thu, Apr 22, 2010 at 05:38:04PM +0700, VU VAN HUNG wrote: szymon roczniak wrote: On Thu, Apr 22, 2010 at 04:50:50PM +0700, VU VAN HUNG wrote: I know, but in the output, I see the following lines: *sql] expand: %{User-Password} - [sql] expand: %{Chap-Password

Re: No User-Password or CHAP-Password attribute in the request

2010-03-03 Thread omega bk
{...} ++[preprocess] returns ok ++[chap] returns noop [files] users: Matched entry linatest at line 11 ++[files] returns ok WARNING: Please update your configuration, and remove 'Auth-Type = Local' WARNING: Use the PAP or CHAP modules instead. No User-Password or CHAP-Password attribute in the request. Cannot

Re: No User-Password or CHAP-Password attribute in the request

2010-03-03 Thread Alan Buxey
'Auth-Type = Local' but it still remaining me this And : No User-Password or CHAP-Password attribute in the request. Cannot perform authentication. Failed to authenticate the user. oh but you do - or did you just not restart the server? are you sure you are editing the right 'users' file

Re: No User-Password or CHAP-Password attribute in the request

2010-03-03 Thread omega bk
{...} ++[preprocess] returns ok ++[chap] returns noop [files] users: Matched entry linatest at line 89 ++[files] returns ok Found Auth-Type = CHAP +- entering group CHAP {...} [chap] rlm_chap: Attribute CHAP-Password is required for authentication. ++[chap] returns invalid Failed to authenticate the user

Re: No User-Password or CHAP-Password attribute in the request

2010-03-03 Thread Alan DeKok
omega bk wrote: hi alan, thanks for your help. i use ubuntu as radius server all configuration file is under /etc/freeradius/* as client i use winxp wired without certificate. just EAP-MSCHAP v2 as authentication method. in my users file i put one user like this:

Re: No User-Password or CHAP-Password attribute in the request

2010-03-03 Thread Alan Buxey
Hi, i use ubuntu as radius server all configuration file is under /etc/freeradius/* as client i use winxp wired without certificate. just EAP-MSCHAP v2 as authentication method. in my users file i put one user like this: ## linatestAuth-Type = CHAP

Re: No User-Password or CHAP-Password attribute in the request

2010-03-03 Thread omega bk
yeah i really messed things up. i got my radius from apt-get i downloaded from source the latest version. i removed the odl one with apt-get remove freeradius i did a dpkg-bildpackage -b -uc but messd in: /home/omega/freeradius-server-2.1.8/src/main/modules.c:1358: undefined reference to

Re: No User-Password or CHAP-Password attribute in the request

2010-03-03 Thread omega bk
oh great i compiled the latest = and tryed new configuration great , it works with my client wired Thank u so much 2010/3/3 omega bk omeg...@gmail.com yeah i really messed things up. i got my radius from apt-get i downloaded from source the latest version. i removed the odl one with

Re: No User-Password or CHAP-Password attribute in the request

2010-03-03 Thread Alan Buxey
Hi, oh great i compiled the latest = and tryed new configuration great , it works with my client wired Thank u so much congratulations - and thanks. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

how to generate chap-password chap-challenge on radius

2010-02-02 Thread Alisson
hi, I need to use chap-password and chap-challenge to authenticate mikrotik on radius and i'm trying to use some pear extensions to do it... but mikrotik use passwords like this password=1 CHAP-Challenge = 0xad2c7efe802ea7bea94e270404eb01ae CHAP-Password = 0x000ad48b2d944948e8014118aeb4e56923

Re: how to generate chap-password chap-challenge on radius

2010-02-02 Thread Alan DeKok
Alisson wrote: hi, I need to use chap-password and chap-challenge to authenticate mikrotik on radius and i'm trying to use some pear extensions to do it... Well.. the RFC's explain how to do CHAP calculations. FreeRADIUS contains examples of how to do it. but mikrotik use passwords like

Re: how to generate chap-password chap-challenge on radius

2010-02-02 Thread Alisson
i'm sending this atributes Cleartext-Password==1 CHAP-Password==1 Mikrotik-Rate-Limit==600k/600k NAS-Identifier=Mikrotik Calling-Station-Id=192.168.3.210 MT-Group=Mikrotik NAS-IP-Address=192.168.3.242 Service-Type=Login-User and on log I have this error [chap] Cleartext-Password is required

Re: how to generate chap-password chap-challenge on radius

2010-02-02 Thread Alan DeKok
Alisson wrote: i'm sending this atributes Were you asked for that information? and on log I have this error Which you already posted before. what atributes I need to change? Read my previous message. I can't say it any more clearly than that. Alan DeKok. - List

CHAP password using perl

2009-01-16 Thread Saeed Akhtar
Hi all, I wrote a code in perl to calculate remaining time using my own database. for authentication I used User-Password attribute. but then I tested it with real NAS server and I realized that I haven't catered CHAP password. Now I want to ask that if there any module which convert CHAP

Re: CHAP password using perl

2009-01-16 Thread tnt
I wrote a code in perl to calculate remaining time using my own database. for authentication I used User-Password attribute. but then I tested it with real NAS server and I realized that I haven't catered CHAP password. Now I want to ask that if there any module which convert CHAP password

My problem: user supplied CHAP-Password does NOT match local User-Password

2008-11-04 Thread Zhifeng Yang
CHAP-Challenge = 0x51239bfb2d63ea383f908d3f255915cb CHAP-Password = 0x00edbc2df1249e7552bdf39f05fa465234 NAS-IP-Address = 192.168.0.130 Service-Type = Login-User Framed-IP-Address = 10.1.0.2 Calling-Station-Id = 00-14-A5-62-AB-2B Called-Station-Id

Re: My problem: user supplied CHAP-Password does NOT match local User-Password

2008-11-04 Thread Alan DeKok
Zhifeng Yang wrote: FreeRadius: 1.1.3 (this is the newest stable version I can apt-get for Debian) Then install 2.1.1 from the source tar file. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

CHAP-Password does NOT match local User-Password

2008-07-08 Thread Maciej Drobniuch
Hi everyone ! I'm a newbie in freeradius. I've tryied several freeradius versions, but i get always the same error: auth: user supplied CHAP-Password does NOT match local User-Password Currently i'm using freeradius 1.0.5 and i want to bind it with the pppoe-server(accounts are mysql based

Re: CHAP-Password does NOT match local User-Password

2008-07-08 Thread Alan DeKok
Maciej Drobniuch wrote: I've tryied several freeradius versions, but i get always the same error: auth: user supplied CHAP-Password does NOT match local User-Password Currently i'm using freeradius 1.0.5 Upgrade to 2.0.5. and i want to bind it with the ... rlm_chap: Setting 'Auth-Type

Re: CHAP-Password does NOT match local User-Password

2008-07-08 Thread Maciej Drobniuch
On Tue, 08 Jul 2008 18:49:48 +0200, Alan DeKok [EMAIL PROTECTED] wrote: Upgrade to 2.0.5. I had tht version and the same error appeared You are forcing Auth-Type. Don't do that. So, what I must force to don't mess up things? And the passwords don't match. The passwords

Re: CHAP-Password does NOT match local User-Password

2008-07-08 Thread Alan DeKok
Maciej Drobniuch wrote: You are forcing Auth-Type. Don't do that. So, what I must force to don't mess up things? Don't force anything. Use the default configuration. And the passwords don't match. The passwords match. Do they have to be in plaint text (in db) or some kind of a

rlm_chap: Attribute CHAP-Password is required for authentication

2008-07-06 Thread Slava
Hi, everybody have been trying to solve the problem, but in vain. It is FR 2.0.2 FreeBSD 6.2-RELEASE-p1 When using radtest (or dial up access) there is no Attribute CHAP-Password and the user is not authenticated, however the same user is authenticated when connecting via VPN. What needs

Re: rlm_chap: Attribute CHAP-Password is required for authentication

2008-07-06 Thread Alan DeKok
Slava wrote: When using radtest (or dial up access) there is no Attribute CHAP-Password and the user is not authenticated, however the same user is authenticated when connecting via VPN. What needs to be changed for dial-up to work? Don't set Auth-Type := CHAP. i.e. use the default

Re: RE:huntgroups are failing auth - missing Chap Password

2008-05-14 Thread Terry Pelley
a password attribute at all. so assuming that I should set the attribute to either CHAP-Password ==password or Cleartext-Password == password I tried both and of course neither works. testuser Huntgroup-Name ==testgroup, CHAP-Password == password yields the same error as having used Cleartext-Password

Re: RE:huntgroups are failing auth - missing Chap Password

2008-05-13 Thread Terry Pelley
? The one that debug suggests is missing? As I said before, the only example of using a huntgroup I can see in the users file does not list a password attribute at all. so assuming that I should set the attribute to either CHAP-Password ==password or Cleartext-Password == password I tried both

Re: huntgroups are failing auth - missing Chap Password

2008-05-13 Thread Alan DeKok
Terry Pelley wrote: As I said before, the only example of using a huntgroup I can see in the users file does not list a password attribute at all. Because the huntgroups file isn't about setting the password. i.e. it doesn't *do* that. It's not *supposed* to do that. Is the use of a

Re: RE:huntgroups are failing auth - missing Chap Password

2008-05-13 Thread Ivan Kalik
How difficult can it be to follow clearly written instructions? As I said before, the only example of using a huntgroup I can see in the users file does not list a password attribute at all. so assuming that I should set the attribute to either CHAP-Password ==password or Cleartext-Password

RE:huntgroups are failing auth - missing Chap Password

2008-05-09 Thread Terry Pelley
to authenticate it fails. My RADIUS Log shows the following entry. Wed May 7 15:07:25 2008 : Auth: Login incorrect (rlm_chap: Clear text password not available): [hunttest/CHAP-Password] (from client NAS04 port 5 cli 00-1E-8C-0E-8E-70) Wed May 7 15:07:25 2008 : Auth: Login incorrect (rlm_chap: Clear text

RE:huntgroups are failing auth - missing Chap Password

2008-05-09 Thread Ivan Kalik
I must be missing something here, likely due to my limited experience with FreeRADIUS. No, all you have to do is to be able to read. With care and understanding. After re-reading the instructions in the users file the only thing I can see that is relevant when using huntgroups is an entry for a

huntgroups are failing auth - missing Chap Password

2008-05-07 Thread Terry Pelley
(rlm_chap: Clear text password not available): [hunttest/CHAP-Password] (from client NAS04 port 5 cli 00-1E-8C-0E-8E-70) Wed May 7 15:07:25 2008 : Auth: Login incorrect (rlm_chap: Clear text password not available): [hunttest/CHAP-Password] (from client NAS04 port 5 cli 00-1E-8C-0E-8E-70) Can some

Re: huntgroups are failing auth - missing Chap Password

2008-05-07 Thread Ivan Kalik
listed as follows. public NAS-IP-Address == 10.252.9.2 when the user huntest attempts to authenticate it fails. My RADIUS Log shows the following entry. Wed May 7 15:07:25 2008 : Auth: Login incorrect (rlm_chap: Clear text password not available): [hunttest/CHAP-Password] (from client NAS04 port 5

Chap password to user password

2007-08-21 Thread Carl aniams
hi Alan, i was able to fix it in chillispot by uncommenting the user password thanks a lot for your assistance -- -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_ ANIAMBOSSOU Carl NIAMS TECHNOLOGIES tel: +229 90 04 08 58 +229 97 48 01 33 COTONOU REPUBLIC OF BENIN WEST AFRICA - List

Chap-password to User-password

2007-08-20 Thread Carl aniams
and the password is in a CHAP-password format rejecting then access with message auth: local auth: user supplied password does not match local user-password when in my radiusd.conf authorize section i uncomment chap i have auth: type CHAP rlm_chap:login attempt by username with CHAP password

Re: Chap-password to User-password

2007-08-20 Thread Alan DeKok
the README. when i fire up radius in debug i notice that there is a CHAP challenge and the password is in a CHAP-password format Because that's what the client sends. If you don't want to use CHAP, fix the client. rlm_chap:login attempt by username with CHAP password rlm_chap: using

Re: Chap-password to User-password

2007-08-20 Thread Alan DeKok
Carl aniams wrote: i understood clearly your explanation doing a little litterature(rfc 2865 SECTION 4.1) i understood it. I'm using a linksys box with dd-wrt and chillispot enable, and i have been going round i really don't see what brings about CHAP in my client and radius exchange.

chap password reject

2007-08-19 Thread Carl aniams
attempt by aniams with CHAP password rlm_chap: using clear text password carl for user aniams authentication rlm_chap: password check failed i've tried many options including reading faq but nothing yet.Attached is my radiusd.conf can somebody give a help? thanks

Re: Using the various User-Password, Chap-Password, etc... with MySQL

2007-07-30 Thread liran tal
work. The FAQ, README, INSTALL, etc. all say to run the server in debugging mode. What about Chap-Password, MD5-Password, SHA1-Password, what are their corresponding values and op like? Read the documentation in man rlm_pap, as suggested in the README. Alan DeKok. - List info

Re: Using the various User-Password, Chap-Password, etc... with MySQL

2007-07-30 Thread Dennis Skinner
liran tal wrote: also mentions that rlm_pap, if put last in the authorize section will try to decrypt the password. There is no decrypt. The server will crypt the plain text password that comes in the request and compare that to the stored crypted password. That is why only PAP will work since

Re: Using the various User-Password, Chap-Password, etc... with MySQL

2007-07-30 Thread liran tal
about Chap-Password, MD5-Password, SHA1-Password, what are their corresponding values and op like? Read the documentation in man rlm_pap, as suggested in the README. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info

Using the various User-Password, Chap-Password, etc... with MySQL

2007-07-29 Thread liran tal
in clear text and the op is == What about Cleartext-Password? I've added this attribute with op of := and value password in clear text and used radtest as a test, and it results in just re-transmission of Access-Request queries, and basically not working. What about Chap-Password, MD5-Password, SHA1

Re: Using the various User-Password, Chap-Password, etc... with MySQL

2007-07-29 Thread Alan DeKok
. The FAQ, README, INSTALL, etc. all say to run the server in debugging mode. What about Chap-Password, MD5-Password, SHA1-Password, what are their corresponding values and op like? Read the documentation in man rlm_pap, as suggested in the README. Alan DeKok. - List info/subscribe/unsubscribe

Problem about Chap-Password and User-Password

2006-06-30 Thread Kun Niu
in the password. ? Double-check the shared secret on the server and the NAS! Delaying request 1 for 1 seconds Finished request 1 The successful one: rad_recv: Access-Request packet from host 192.168.1.1:32812, id=0, length=84 User-Name = abc CHAP-Password

Re: Problem about Chap-Password and User-Password

2006-06-30 Thread Stefan Winter
192.168.1.1:32812, id=0, length=84 User-Name = abc CHAP-Password = 0x04f97271e7e12220a7f6397cc15a62f7e2 NAS-IP-Address = 192.168.1.1 Acct-Session-Id = 5b01 NAS-Port = 3 CHAP-Challenge = 0x00ac45bdd7e79c6af29ee0b413c874a8 Processing the authorize section

Decrypt Chap Password

2006-02-07 Thread Joseph
Is there an easy way to see what password is being sent to FR when the pass is sent as Chap-Password ?-- respectfully, Joseph - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Decrypt Chap Password

2006-02-07 Thread Alan DeKok
Joseph [EMAIL PROTECTED] wrote: Is there an easy way to see what password is being sent to FR when the pass is sent as Chap-Password ? No. It's a one-way transformation. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Authenticating CHAP-Password to Pam (Kerberos 5 to AD)

2006-01-28 Thread Phil Mayers
Yes. And once Samba4 is a full-fledged member of an AD domain, the other AD servers will happily replicate data to it... including the clear-text password. Samba4 can then expose it in the userPassword field. Ah, so samba4 as a PDC rather than member server, peering with microsoft PDCs.

Authenticating CHAP-Password to Pam (Kerberos 5 to AD)

2006-01-27 Thread Patrick Bartkus
PAM Processing the authenticate section of radiusd.confmodcall: entering group authenticate for request 0rlm_pam: Attribute User-Password is required for authentication. Cannot use CHAP-Password. modcall[authenticate]: module pam returns invalid for request 0I did some checking and found

Re: Authenticating CHAP-Password to Pam (Kerberos 5 to AD)

2006-01-27 Thread Phil Mayers
fine. But I'm getting: auth: type PAM Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 rlm_pam: Attribute User-Password is required for authentication. Cannot use CHAP-Password. modcall[authenticate]: module pam returns invalid

Re: Authenticating CHAP-Password to Pam (Kerberos 5 to AD)

2006-01-27 Thread Patrick Bartkus
Phil, Thanks.In another thread I read, you wrote:---The MS-CHAP module requires either the MD4-based NT password hash, theplaintext password from which it can derive the NT has, or callout toSamba domain membership.---Does this mean that if I setup Samba on this box, get it to be a member of the

Re: Authenticating CHAP-Password to Pam (Kerberos 5 to AD)

2006-01-27 Thread Alan DeKok
Patrick Bartkus [EMAIL PROTECTED] wrote: I'm trying to authenticate an Ascend MAX dial-up server back to Windows Active Directory. If the Access-Request contains CHAP, it's impossible. CHAP requires a clear-text password, which AD doesn't supply. Alan DeKok. - List

Re: Authenticating CHAP-Password to Pam (Kerberos 5 to AD)

2006-01-27 Thread Phil Mayers
Patrick Bartkus wrote: Phil, Thanks. In another thread I read, you wrote: --- The MS-CHAP module requires either the MD4-based NT password hash, the plaintext password from which it can derive the NT has, or callout to Samba domain membership. --- Does this mean that if I setup Samba on

Re: Authenticating CHAP-Password to Pam (Kerberos 5 to AD)

2006-01-27 Thread Alan DeKok
Patrick Bartkus [EMAIL PROTECTED] wrote: Does this mean that if I setup Samba on this box, get it to be a member of the domain exchanging Domain UIDs and passwords, I could then authenticate to Samba from my MS-CHAP-speaking NAS? Possible. If it's an NT domain. If it's an Active

Re: Authenticating CHAP-Password to Pam (Kerberos 5 to AD)

2006-01-27 Thread Phil Mayers
Alan DeKok wrote: Patrick Bartkus [EMAIL PROTECTED] wrote: Does this mean that if I setup Samba on this box, get it to be a member of the domain exchanging Domain UIDs and passwords, I could then authenticate to Samba from my MS-CHAP-speaking NAS? Possible. If it's an NT domain. If it's

Re: Authenticating CHAP-Password to Pam (Kerberos 5 to AD)

2006-01-27 Thread Phil Mayers
Alan DeKok wrote: Phil Mayers [EMAIL PROTECTED] wrote: I'm confused - I and many people are doing MS-CHAP to an AD domain with samba3, winbind and the ntlm_auth helper - what are you referring to that doesn't work that samba4 would change? Yes, they're using the old-style NT4 logins. So

Re: Authenticating CHAP-Password to Pam (Kerberos 5 to AD)

2006-01-27 Thread Alan DeKok
Phil Mayers [EMAIL PROTECTED] wrote: Why would samba4 be any different that samba3 in that regard? Because Samba4 will be a full-fledged AD domain member. Samba3 is a second-class citizen of an AD domain, as it implements NT domains. I assume we are talking about the same thing (samba as a

Re: windows XP computer WPA, TKIP, PEAP, EAP-MSCHAP v2 has No User-Password or CHAP-Password attribute in the request

2006-01-23 Thread PoWah Wong
: 'Hello, test' modcall[authorize]: module files returns ok for request 0 modcall: group authorize returns updated for request 0 rad_check_password: Found Auth-Type Local auth: type Local auth: No User-Password or CHAP-Password attribute in the request auth: Failed to validate the user. Delaying

Re: windows XP computer WPA, TKIP, PEAP, EAP-MSCHAP v2 has No User-Password or CHAP-Password attribute in the request

2006-01-23 Thread Alan DeKok
PoWah Wong [EMAIL PROTECTED] wrote: I configure /etc/raddb/users as follows: testAuth-Type := Local, User-Password == testing That should be testAuth-Type = Local, User-Password := testing See the man page for the users file, and other posts to this list. Alan DeKok. - List

Re: windows XP computer WPA, TKIP, PEAP, EAP-MSCHAP v2 has No User-Password or CHAP-Password attribute in the request

2006-01-23 Thread PoWah Wong
users file is changed to: testAuth-Type = Local, User-Password := testing However, still has problem. Debug output is: rad_recv: Access-Request packet from host 127.0.0.1:52001, id=42, length=149 Framed-MTU = 1380 NAS-IP-Address = 0.0.0.0 NAS-Identifier = wifictrl

Re: windows XP computer WPA, TKIP, PEAP, EAP-MSCHAP v2 has No User-Password or CHAP-Password attribute in the request

2006-01-23 Thread Alan DeKok
PoWah Wong [EMAIL PROTECTED] wrote: rlm_eap: EAP-NAK asked for EAP-Type/peap rlm_eap: No such EAP type peap Did you try reading eap.conf, and configuring PEAP? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: windows XP computer WPA, TKIP, PEAP, EAP-MSCHAP v2 has No User-Password or CHAP-Password attribute in the request

2006-01-21 Thread A . L . M . Buxey
: Found Auth-Type Local auth: type Local auth: No User-Password or CHAP-Password attribute in the request auth: Failed to validate the user. do you have this user listed in the Users file? how exactly are you trying to authenticate them? alan - List info/subscribe/unsubscribe? See http

windows XP computer WPA, TKIP, PEAP, EAP-MSCHAP v2 has No User-Password or CHAP-Password attribute in the request

2006-01-20 Thread PoWah Wong
]: module files returns ok for request 5 modcall: group authorize returns updated for request 5 rad_check_password: Found Auth-Type Local auth: type Local auth: No User-Password or CHAP-Password attribute in the request auth: Failed to validate the user. Delaying request 5 for 1 seconds Finished

Re: Chap password failing with Cisco

2005-07-08 Thread Brent Smith
of those platforms, but I upgraded to 1.0.4 with the same result. Also, if all is fine in that respect, your paket seems to contain CHAP-Password only, no CHAP-Challenge. IIRC, there's a rule on how to automatically derive a CHAP-Challenge from the rest of the RADIUS paket, but I have no idea how

Re: Chap password failing with Cisco

2005-07-01 Thread Stefan . Neis
(and this CHAP) an some hardware (e.g. 64-bit (like AMD-64) or big-endian (like SPARC) processors), so if you're running one of those, an update might be helpful. Search the mailing list archives for details... Also, if all is fine in that respect, your paket seems to contain CHAP-Password only, no CHAP

Chap password failing with Cisco

2005-06-30 Thread Brent Smith
-ISDNBackup, Cisco-Avpair += lcp:interface-config=ip unnumbered loop144, Cisco-Avpair += lcp:send-secret=password log: rad_recv: Access-Request packet from host XX.XX.XX.XX:1645, id=0, length=91 Framed-Protocol = PPP User-Name = ie_phx2 CHAP-Password

Auth: Login incorrect: [user/CHAP-Password]

2005-06-17 Thread Adil Azmi Bikarbass
Dear FreeRadius list members, I'm really stuck with an authentication problem here: I'm getting the following error meesage anytime a user try to connect through my Freeradius server : Auth: Login incorrect: [user/CHAP-Password] (from client MT2_ADSL port 1476461184) Auth: rlm_unix

Re: Auth: Login incorrect: [user/CHAP-Password]

2005-06-17 Thread Jandre Olivier
the following error meesage anytime a user try to connect through my Freeradius server : Auth: Login incorrect: [user/CHAP-Password] (from client MT2_ADSL port 1476461184) Auth: rlm_unix: Attribute User-Password is required for authentication. Cannot use CHAP-Password. Here is the radius entry

Re: Auth: Login incorrect: [user/CHAP-Password]

2005-06-17 Thread Adil Azmi Bikarbass
members, I'm really stuck with an authentication problem here: I'm getting the following error meesage anytime a user try to connect through my Freeradius server : Auth: Login incorrect: [user/CHAP-Password] (from client MT2_ADSL port 1476461184) Auth: rlm_unix: Attribute User-Password is required

Re: Auth: Login incorrect: [user/CHAP-Password]

2005-06-17 Thread Roberto Gonzalez Azevedo
Azmi Bikarbass wrote: Dear FreeRadius list members, I'm really stuck with an authentication problem here: I'm getting the following error meesage anytime a user try to connect through my Freeradius server : Auth: Login incorrect: [user/CHAP-Password] (from client MT2_ADSL port 1476461184

Re: Auth: Login incorrect: [user/CHAP-Password]

2005-06-17 Thread Alan DeKok
Adil Azmi Bikarbass [EMAIL PROTECTED] wrote: Auth: Login incorrect: [user/CHAP-Password] (from client MT2_ADSL port 1476461184) Auth: rlm_unix: Attribute User-Password is required for authentication. Cannot use CHAP-Password. You have set Auth-Type := System, which doesn't work for CHAP

Re: Auth: Login incorrect: [user/CHAP-Password]

2005-06-17 Thread Alan DeKok
Adil Azmi Bikarbass [EMAIL PROTECTED] wrote: Yes but the Auth-Type := System is at the end of the users file while the user has its entries at the beginning o the users file! That's nice. It's also irrelevant. Run the server in debugging mode to see which entries are matched, and why.

RE: CHAP password in Exec-Program

2004-08-21 Thread Jerlique Ban
Hi, Thanks for your comments Alan. Jerlique Ban [EMAIL PROTECTED] wrote: I've now switched to using freeradius 1.0.0-pre3 on freebsd. I am trying to authenticate users via my Exec-Program call, which does a whole lot of other queries and tests before granting access. It all works if a

Re: CHAP password in Exec-Program

2004-08-21 Thread Simon Bryden
++--+---+ | 1 | jlb | dial | | 2 | jlb | adsl | ++--+---+ The sql code only supports one group per user. You can't be in two groups. In your case the group lookup will return the first entry returned by the sql query and you

Attribute User-Password is required for authentication. Cannot,use CHAP-Password

2004-07-17 Thread Beast
= testuser CHAP-Challenge = 0x110b76f0ef9b54040c1b8b19d3c85da67e937fa9afc51100a3469aec1680a2288b1a197bb56d80c2890cdc5dd53a0454ce84fe7e4b10 CHAP-Password = 0x01355e4b8ae9bd8fc0a51616f4c9c4f0c7 NAS-Port = 0 NAS-Port-Type = Virtual Service-Type = Framed-User

CHAP Password

2004-05-23 Thread SANDEEP KHANNA
which I send to the server again with the command radclient User-Name=somevalue,CHAP-Password=thatvalue,State=u8w222. | radclient server ip:port auth shared Secret key , server send me Wrong