[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freeradius-users
Subject:    Re: etc_passwd module doesnt authenticate
From:       "Alan DeKok" <aland () ox ! org>
Date:       2005-07-28 17:02:25
Message-ID: 20050728170225.E2AEA16FAB () mail ! nitros9 ! org
[Download RAW message or body]

Ramses van Pinxteren <ramses@niob.knaw.nl> wrote:
> >   You've configured the passwd module to set Auth-Type = MSCHAP.
> >Don't do that.
> 
> This is the config file I am using minus all the comments:

  That's nice.  It's also irrelevant.  I asked you to change *one*
thing, not to show your entire config.

> rad_recv: Access-Request packet from host 127.0.0.1:32774, id=224, length=62
>          User-Name = "ramses"
>          User-Password = "95903FD81E9ECFEC17306D272A9441BB"

  Is that really the password?  I doubt it very much.

> rlm_passwd: Added LM-Password: '95903FD81E9ECFEC17306D272A9441BB' to 
> config_items

  Ah, yes.  You're giving the client the hashed password, not the real
password.  That's wrong.

> auth: No authenticate method (Auth-Type) configuration found for the 
> request: Rejecting the user

  So set Auth-Type.  But don't set it to MS-CHAP.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
[prev in list] [next in list] [prev in thread] [next in thread]