LDAP的Freeradius-Cisco WLC-身份验证失败

Question

I am getting the following error in debug mode

[mschapv2] +group MS-CHAP {
[mschap] No Cleartext-Password configured.  Cannot create LM-Password.
[mschap] No Cleartext-Password configured.  Cannot create NT-Password.
[mschap] Creating challenge hash with username: tuser
[mschap] Client is using MS-CHAPv2 for tuser, we need NT-Password
[mschap] FAILED: No NT/LM-Password.  Cannot perform authentication.
[mschap] FAILED: MS-CHAP2-Response is incorrect

I am pretty sure this is the issue. I am using OpenDJ as the backend ldap server and using freeradius with ldap. Please tell me if I would be missing anything or if there is a specific configuration I have to make. There is nothing network wise that is blocking ports. Note: I am using a Mac to authenticate.

Answer 1

Can you login locally on freeradius server with LDAP creds?

radtest $login $pass 127.0.0.1 10 $secret

If yes, you should probably stop freeradius service and run "freeradius -X" which show you debug from the server side.

Paste your sites-enabled/default config, do you have ms-chap uncommented there?