Re: PEAP authentication with freerad ?

2006-06-06 Thread Alan DeKok
"thomas hahusseau" <[EMAIL PROTECTED]> wrote: > First : If I uncomment "eap" in authorize section of radiusd.conf : Which you MUST do, or EAP doesn't work. > rlm_eap_peap: Had sent TLV failure, rejecting. Why are you insisting on looking at only a portion of the debug output? Look P

Re: PEAP authentication with freerad ?

2006-06-06 Thread thomas hahusseau
I dont understand why it doesn't work , Password are in clear in LDAP base , the only thing that i want is freeradius recieve login and password form an PEAP (Mschapv2) authentification request and compare it from password and login stocked in LDAP database if it's matched so allow the access. her

Re: PEAP authentication with freerad ?

2006-06-06 Thread Alan DeKok
"thomas hahusseau" <[EMAIL PROTECTED]> wrote: > modcall: entering group Auth-Type for request 6 > rlm_mschap: No User-Password configured. Cannot create LM-Password. > rlm_mschap: No User-Password configured. Cannot create NT-Password. This means that the server has no clear-text password.

Re: PEAP authentication with freerad ?

2006-06-06 Thread thomas hahusseau
Yes i use PEAP/MsChapv2 , and password in OpenLDAP are stocked in clear mode , but there is a really strange eror while I try an autothentication via EAP-PEAP (MSCHAPv2) here is the output of Freeradius : lm_ldap: checking if remote access for test is allowed by uid rlm_ldap: looking for check ite

Re: PEAP authentication with freerad ?

2006-06-06 Thread Michael Griego
I assume by PEAP, you mean the most-often-seen PEAP/EAP-MSCHAPv2. In this case, MD5 is not involved anywhere. The passwords are hashed differently. As such, you must either have an NT hashed password (which is actually a unicode-encoded MD4 hash of the password) or a cleartext password i

PEAP authentication with freerad ?

2006-06-06 Thread thomas hahusseau
Hello, I would like to use PEAP to perfome authentication of wlan users , I choose PEAP because Users and Passwords are in an LDAP Server (OPEN-LDAP). According to me PEAP works like this : Phase 1 :: TLS handshake the server authenticate to the client as a trusted radius serveur and a cipher tun