设置 Windows 8.1 802.1x MS-CHAPv2 和 freeradius 问题

Question

我无法使用 MS-CHAPv2 和 Freeradius 验证我的 Windows 笔记本电脑。

这是我收到的错误消息：

(7) eap_mschapv2: # Executing group from file /etc/raddb/sites-enabled/inner-tunnel
(7) eap_mschapv2:   authenticate {
(7) mschap: WARNING: No Cleartext-Password configured.  Cannot create NT-Password
(7) mschap: WARNING: No Cleartext-Password configured.  Cannot create LM-Password
(7) mschap: Creating challenge hash with username: maksim
(7) mschap: Client is using MS-CHAPv2
(7) mschap: ERROR: FAILED: No NT/LM-Password.  Cannot perform authentication
(7) mschap: ERROR: MS-CHAP2-Response is incorrect
(7)     [mschap] = reject
(7)   } # authenticate = reject
(7) eap: Sending EAP Failure (code 4) ID 8 length 4
(7) eap: Freeing handler
(7)       [eap] = reject
(7)     } # authenticate = reject
(7)   Failed to authenticate the user
(7)   Login incorrect (mschap: FAILED: No NT/LM-Password.  Cannot perform authentication): [maksim] (from client dlink port 0 via TLS tunnel)

说我没有配置Cleartext-Password，但我不同意：

MariaDB [radius]> select * from radcheck;
+----+----------+--------------------+----+----------+
| id | username | attribute          | op | value    |
+----+----------+--------------------+----+----------+
|  9 | maksim   | User-Password      | := | 1q2w3e4r |
|  8 | maksim   | Cleartext-Password | := | 1q2w3e4r |
| 10 | maksim   | Auth-Type          | := | MS-CHAP  |
| 11 | maksim   | CHAP-Password      | := | 1q2w3e4r |
| 12 | maksim   | NT-Password        | := | 1q2w3e4r |
+----+----------+--------------------+----+----------+
5 rows in set (0.00 sec)

Answer 1

通过更改解决

driver = "rlm_sql_null"

至

driver = "rlm_sql_mysql"

在

/etc/raddb/mods-enabled/sql

设置 Windows 8.1 802.1x MS-CHAPv2 和 freeradius 问题

Setup Windows 8.1 802.1x MS-CHAPv2 and freeradius issue

windows

centos7

freeradius