Forum Debian Users Gang

Sending Access-Request of id 237 to 127.0.0.1 port 1812
    User-Name = "radius"
    NAS-IP-Address = 127.0.1.1
    NAS-Port = 0
    Message-Authenticator = 0x00000000000000000000000000000000
    MS-CHAP-Challenge = 0x7683a7abbc2255ec
    MS-CHAP-Response =
0x0001000000000000000000000000000000000000000000000000a694a18af533fba029ed30b26b8d46827b58b67aa17a62b1
rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=237,
length=38
    MS-CHAP-Error = "\000E=691 R=1"

User-Name = "radius"
    NAS-IP-Address = 127.0.1.1
    NAS-Port = 0
    Message-Authenticator = 0x3187afa3b1983c459622447e005e7674
    MS-CHAP-Challenge = 0x7683a7abbc2255ec
    MS-CHAP-Response =
0x0001000000000000000000000000000000000000000000000000a694a18af533fba029ed30b26b8d46827b58b67aa17a62b1
# Executing section authorize from file
/etc/freeradius/sites-enabled/default
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
[mschap] Found MS-CHAP attributes.  Setting 'Auth-Type  = mschap'
++[mschap] returns ok
++[digest] returns noop
[suffix] No '@' in User-Name = "radius", looking up
realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] No EAP-Message, not doing EAP
++[eap] returns noop
++[unix] returns updated
++[files] returns noop
++[expiration] returns noop
++[logintime] returns noop
[pap] WARNING: Auth-Type already set.  Not setting to PAP
++[pap] returns noop
Found Auth-Type = MSCHAP
# Executing group from file /etc/freeradius/sites-enabled/default
+- entering group MS-CHAP {...}
[mschap] Told to do MS-CHAPv1 with NT-Password
Invalid variable expansion passed as argument for external program
[mschap] External script failed.
[mschap] MS-CHAP-Response is incorrect.
++[mschap] returns reject
Failed to authenticate the user.
Using Post-Auth-Type Reject
# Executing group from file /etc/freeradius/sites-enabled/default
+- entering group REJECT {...}
[attr_filter.access_reject]     expand: %{User-Name} -> radius
attr_filter: Matched entry DEFAULT at line 11
++[attr_filter.access_reject] returns updated
Delaying reject of request 9 for 1 seconds
Going to the next request
Waking up in 0.9 seconds.
Sending delayed reject for request 9
Sending Access-Reject of id 237 to 127.0.0.1 port 35162
    MS-CHAP-Error = "\000E=691 R=1"
Waking up in 4.9 seconds.
Cleaning up request 9 ID 237 with timestamp +1944
Ready to process requests.