Re: pptpd mschap auth fails

2013-08-06 Thread Horatiu Nimigean
oook the damn password is "letmein" for testing purposes. i can't seriously mistype it that many times. and i did not. it turns out lam successfully reports changing both unix and samba passwords but upon closer inspection and verifying with smbencrypt cli tool the samba hases are NOT updat

Re: pptpd mschap auth fails

2013-08-06 Thread Horatiu Nimigean
ok so i edited /etc/raddb/sites-enabled/default and commented pap from authorize { ... } and commented Auth-Type PAP { pap } from authenticate { ... } but i still have the same error . i have also created a new user betatesting1 i have also tested in the local shell (although it attem

Re: pptpd mschap auth fails

2013-08-06 Thread Alan DeKok
Horatiu Nimigean wrote: > the auth fails however when i try conencting from my windows8 client. > i need to mention that i am sure i'm inputting correct passwords. No, you're not. > [mschap] Found NT-Password > [mschap] Creating challenge hash with username: testuser1 > [mschap] Tol

Re: pptpd mschap auth fails

2013-08-06 Thread Phil Mayers
On 06/08/13 16:04, Horatiu Nimigean wrote: i have pptpd on a centos 6 box configured to use radius for auth. radius in turn checks credentials in ldap. the user in ldap has a samba extension and a configured password (i used ldap account manager to set it up) it also has a sambaNTPassword field a

pptpd mschap auth fails

2013-08-06 Thread Horatiu Nimigean
i have pptpd on a centos 6 box configured to use radius for auth. radius in turn checks credentials in ldap. the user in ldap has a samba extension and a configured password (i used ldap account manager to set it up) it also has a sambaNTPassword field and it's populated. rpm -q freeradius give

AW: AW: MSCHAP Auth fails

2012-04-04 Thread Weber, Felix
Alan DeKok Gesendet: Mittwoch, 4. April 2012 18:43 An: FreeRadius users mailing list Betreff: Re: AW: MSCHAP Auth fails Go back and ensure that there is only ONE mschap module in the "modules" directory. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: AW: MSCHAP Auth fails

2012-04-04 Thread Alan DeKok
Weber, Felix wrote: > Just looked at this line in my config there is a "--ntresponse" instead > of "#ntresponse" That's bad. > In my mschap module the ntresponse parameter is written with "--", so > why is radtest interpreting it with an "#" ?? Because it's written with a '#' in the mschap m

AW: MSCHAP Auth fails

2012-04-04 Thread Weber, Felix
Just looked at this line in my config there is a "--ntresponse" instead of "#ntresponse" [mschap]expand: #ntresponse=%{mschap:NT-Response:-00} -> #ntresponse=f7b8cd66af90b5791fb4b09421dbbf2cbed180e7e72304b5 Exec-Program output: Logon failure (0xc06d) Exec-Program-Wait: plaintext: Logo

AW: MSCHAP Auth fails

2012-04-04 Thread Weber, Felix
us.org] Im Auftrag von Andres Septer Gesendet: Mittwoch, 4. April 2012 14:14 An: FreeRadius users mailing list Betreff: RE: MSCHAP Auth fails # Executing group from file /etc/raddb/sites-enabled/packetfence +- entering group MS-CHAP {...} [mschap] Told to do MS-CHAPv1 with NT-Passwo

RE: MSCHAP Auth fails

2012-04-04 Thread Andres Septer
# Executing group from file /etc/raddb/sites-enabled/packetfence +- entering group MS-CHAP {...} [mschap] Told to do MS-CHAPv1 with NT-Password [mschap]expand: %{Stripped-User-Name} -> [mschap]... expanding second conditional [mschap]expand: %{mschap:User-Name:-None} -> Us

MSCHAP Auth fails

2012-04-04 Thread Weber, Felix
Hello out there, I'm testing the FreeRADIUS Version 2.1.12 Modul with AD Integration following the deployingradius.com Guide. Installed winbind and samba Version 3.6.3 and ntlm_auth tests are fine. Now i'm testing with radtest while running radius in Debug mod. The following line has been added to