PEAP mschapv2 E= 691 R=0 code is correct?

classic Classic list List threaded Threaded
7 messages Options
| Threaded
Open this post in threaded view
|

PEAP mschapv2 E= 691 R=0 code is correct?

엔트로링크(주)
Hi.
 
At Cisco ISE case, Change at ISE user password then, Windows 10 Input Password input page popuped,
but, FR3.x is not popup. below is debug
--
Released connection (2)
Fri Sep 25 19:55:58 2020 : Debug: (6)       modsingle[post-auth]: returned from sql (rlm_sql)
Fri Sep 25 19:55:58 2020 : Debug: (6)       [sql] = ok
Fri Sep 25 19:55:58 2020 : Debug: (6)       if (reply:MS-CHAP-Error =~ /E=691 R=0/) {
Fri Sep 25 19:55:58 2020 : Debug: No matches
Fri Sep 25 19:55:58 2020 : Debug: (6)       if (reply:MS-CHAP-Error =~ /E=691 R=0/)  -> FALSE
Fri Sep 25 19:55:58 2020 : Debug: (6)       modsingle[post-auth]: calling attr_filter.access_reject (rlm_attr_filter)
Fri Sep 25 19:55:58 2020 : Debug: %{User-Name}
Fri Sep 25 19:55:58 2020 : Debug: Parsed xlat tree:
Fri Sep 25 19:55:58 2020 : Debug: attribute --> User-Name
Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: EXPAND %{User-Name}
Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject:    --> user01
Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Matched entry DEFAULT at line 1
Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Attribute "Cleartext-Password" allowed by 0 rules, disallowed by 0 rules
Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: MS-CHAP-Error = "\006E=691 R=1 C=02fa5a91d12763de0ebb5702753e7402 V=3 M=Authentication rejected" allowed by MS-CHAP-Error =* ""
Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Attribute "MS-CHAP-Error" allowed by 1 rules, disallowed by 0 rules
Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: MS-CHAP-Error = "\006E=691 R=1 C=3ffb7931c560572bb7e802f970f89497 V=3 M=Authentication failed" allowed by MS-CHAP-Error =* ""
Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Attribute "MS-CHAP-Error" allowed by 1 rules, disallowed by 0 rules
Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: EAP-Message = 0x04060004 allowed by EAP-Message =* 0x
Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Attribute "EAP-Message" allowed by 1 rules, disallowed by 0 rules
Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Message-Authenticator = 0x00000000000000000000000000000000 allowed by Message-Authenticator =* 0x
Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Attribute "Message-Authenticator" allowed by 1 rules, disallowed by 0 rules
--
Thanks
 
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
| Threaded
Open this post in threaded view
|

Re: PEAP mschapv2 E= 691 R=0 code is correct?

Alan DeKok-2
On Sep 25, 2020, at 7:49 AM, 엔트로링크(주) <[hidden email]> wrote:
>
> At Cisco ISE case, Change at ISE user password then, Windows 10 Input Password input page popuped,
> but, FR3.x is not popup. below is debug


  Post ALL of the debug.  The documentation says to do that.

http://wiki.freeradius.org/list-help

  What you posted is a tiny portion of the debug, and is useless.

  Alan DeKok.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
| Threaded
Open this post in threaded view
|

Re: PEAP mschapv2 E= 691 R=0 code is correct?

엔트로링크(주)
atteched full log files;
Thanks
-----Original Message-----
From: "Alan DeKok"<[hidden email]>
To: "FreeRadius users mailing list"<[hidden email]>;
Cc:
Sent: 2020-09-25 (금) 20:56:12 (GMT+09:00)
Subject: Re: PEAP mschapv2 E= 691 R=0 code is correct?
 
On Sep 25, 2020, at 7:49 AM,
>
> At Cisco ISE case, Change at ISE user password then, Windows 10 Input Password input page popuped,
> but, FR3.x is not popup. below is debug


 Post ALL of the debug.  The documentation says to do that.

http://wiki.freeradius.org/list-help

 What you posted is a tiny portion of the debug, and is useless.

 Alan DeKok.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

=?utf-8?B?cnRlc3Q=?= (344K) Download Attachment
| Threaded
Open this post in threaded view
|

Re: PEAP mschapv2 E= 691 R=0 code is correct?

Alan DeKok-2
On Sep 25, 2020, at 8:48 AM, 엔트로링크(주) <[hidden email]> wrote:
>
> atteched full log files

  The documentation suggest that you post TEXT.  It's just easier.

  When you make it difficult for us to help you, we're inclined to NOT help you.

  Alan DeKok.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
| Threaded
Open this post in threaded view
|

Re: PEAP mschapv2 E= 691 R=0 code is correct?

엔트로링크(주)
In reply to this post by 엔트로링크(주)
again atteched.
 
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
| Threaded
Open this post in threaded view
|

Re: PEAP mschapv2 E= 691 R=0 code is correct?

Alan DeKok-2
On Sep 25, 2020, at 8:58 AM, 엔트로링크(주) <[hidden email]> wrote:
>
> again atteched.

  The mailing list strips zip files.

  Attach it as a "foo.txt" file.  OR paste it in-line as text.  DON'T post HTML.

  Alan DeKok.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
| Threaded
Open this post in threaded view
|

Re: PEAP mschapv2 E= 691 R=0 code is correct?

Alan DeKok-2
  <sigh>  PLEASE don't email freeradius-users-owners.  That is the list OWNER.  Not the list.

  And don't mail ZIP files to me either.

  I don't understand why this is difficult.

  Alan DeKok.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html