Hello
I have configured Mikrotik 5.18 with Freeradius for authorization and accounting of PPTP users. The issue i am facing is that whenever i try to connect the pptp user i successfully get connected but sa soon as the connection is successful it immediately disconnects and my vpn client for windows 10 says “It was not possible to verify the identity of server” . This only happens for MSCHAP not for PAP as i dont have any issues with PAP. Please find the logs below
rad_recv: Access-Request packet from host 192.168.21.180 port 44535, id=211, length=181
Service-Type = Framed-User
Framed-Protocol = PPP
NAS-Port = 72
NAS-Port-Type = Virtual
User-Name = “ahmed”
Calling-Station-Id = “192.168.21.110”
Called-Station-Id = “192.168.21.180”
MS-CHAP-Challenge = 0x8c7fb725f13f096f3e140b90a29331d8
MS-CHAP2-Response = 0x010062019b4fc4b02dc3cdec2fbd4a02155000000000000000004827c2c6b307ee544d34a1d104177063a4b9e01547ab3cc7
NAS-Identifier = “MikroTik”
NAS-IP-Address = 192.168.21.180
Fri Feb 17 12:37:13 2017 : Info: # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
Fri Feb 17 12:37:13 2017 : Info: +group authorize {
Fri Feb 17 12:37:13 2017 : Info: ++[digest] = noop
*** authorize ***
Fri Feb 17 12:37:13 2017 : Info: *** radlog call in authorize ***
((‘Service-Type’, ‘Framed-User’), (‘Framed-Protocol’, ‘PPP’), (‘NAS-Port’, ‘72’), (‘NAS-Port-Type’, ‘Virtual’), (‘User-Name’, ‘“ahmed”’), (‘Calling-Station-Id’, ’
d-Station-Id’, ‘“192.168.21.180”’), (‘MS-CHAP-Challenge’, ‘0x8c7fb725f13f096f3e140b90a29331d8’), (‘MS-CHAP2-Response’, ‘0x010062019b4fc4b02dc3cdec2fbd4a0215500000
44d34a1d104177063a4b9e01547ab3cc7’), (‘NAS-Identifier’, ‘“MikroTik”’), (‘NAS-IP-Address’, ‘192.168.21.180’))
Fri Feb 17 12:37:13 2017 : Info: ++[python] = ok
Fri Feb 17 12:37:13 2017 : Info: [files] users: Matched entry DEFAULT at line 173
Fri Feb 17 12:37:13 2017 : Info: [files] users: Matched entry DEFAULT at line 176
Fri Feb 17 12:37:13 2017 : Info: ++[files] = ok
Fri Feb 17 12:37:13 2017 : Info: +} # group authorize = ok
Fri Feb 17 12:37:13 2017 : Info: Found Auth-Type = Python
Fri Feb 17 12:37:13 2017 : Info: # Executing group from file /usr/local/etc/raddb/sites-enabled/default
Fri Feb 17 12:37:13 2017 : Info: +group Python {
*** authenticate ***
Fri Feb 17 12:37:13 2017 : Info: *** radlog call in authenticate ***
Fri Feb 17 12:37:13 2017 : Info: ++[python] = ok
Fri Feb 17 12:37:13 2017 : Info: +} # group Python = ok
Fri Feb 17 12:37:13 2017 : Info: # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
Fri Feb 17 12:37:13 2017 : Info: +group post-auth {
Fri Feb 17 12:37:13 2017 : Info: ++[exec] = noop
Fri Feb 17 12:37:13 2017 : Info: +} # group post-auth = noop
Sending Access-Accept of id 211 to 192.168.21.180 port 44535
Framed-Protocol = PPP
Framed-Compression = Van-Jacobson-TCP-IP
Fri Feb 17 12:37:13 2017 : Info: Finished request 3.
Fri Feb 17 12:37:13 2017 : Debug: Going to the next request
Fri Feb 17 12:37:13 2017 : Debug: Waking up in 4.9 seconds.
rad_recv: Accounting-Request packet from host 192.168.21.180 port 47408, id=212, length=139
Service-Type = Framed-User
Framed-Protocol = PPP
NAS-Port = 72
NAS-Port-Type = Virtual
User-Name = “ahmed”
Calling-Station-Id = “192.168.21.110”
Called-Station-Id = “192.168.21.180”
Acct-Session-Id = “81300035”
Framed-IP-Address = 0.0.0.0
Acct-Authentic = RADIUS
Event-Timestamp = “Jan 2 2005 21:17:03 GMT”
Acct-Status-Type = Start
NAS-Identifier = “MikroTik”
Acct-Delay-Time = 0
NAS-IP-Address = 192.168.21.180
Fri Feb 17 12:37:13 2017 : Info: # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
Fri Feb 17 12:37:13 2017 : Info: +group preacct {
Fri Feb 17 12:37:13 2017 : Info: ++[preprocess] = ok
Fri Feb 17 12:37:13 2017 : Info: [acct_unique] Hashing 'NAS-Port = 72,NAS-Identifier = “MikroTik”,NAS-IP-Address = 192.168.21.180,Acct-Session-Id = “81300035”,Use
Fri Feb 17 12:37:13 2017 : Info: [acct_unique] Acct-Unique-Session-ID = “37bf6053d74c7379”.
Fri Feb 17 12:37:13 2017 : Info: ++[acct_unique] = ok
Fri Feb 17 12:37:13 2017 : Info: [suffix] No ‘@’ in User-Name = “ahmed”, looking up realm NULL
Fri Feb 17 12:37:13 2017 : Info: [suffix] No such realm “NULL”
Fri Feb 17 12:37:13 2017 : Info: ++[suffix] = noop
Fri Feb 17 12:37:13 2017 : Info: ++[files] = noop
Fri Feb 17 12:37:13 2017 : Info: # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
Fri Feb 17 12:37:13 2017 : Info: +group accounting {
Fri Feb 17 12:37:13 2017 : Info: [detail] expand: %{Packet-Src-IP-Address} → 192.168.21.180
Fri Feb 17 12:37:13 2017 : Info: [detail] expand: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d →
radacct/192.168.21.180/detail-20170217
Fri Feb 17 12:37:13 2017 : Info: [detail] /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /usr/
t/192.168.21.180/detail-20170217
Fri Feb 17 12:37:13 2017 : Info: [detail] expand: %t → Fri Feb 17 12:37:13 2017
Fri Feb 17 12:37:13 2017 : Info: ++[detail] = ok
*** accounting ***
Fri Feb 17 12:37:13 2017 : Info: *** radlog call in accounting ***
Fri Feb 17 12:37:13 2017 : Info: ++[python] = ok
Fri Feb 17 12:37:13 2017 : Info: +} # group accounting = ok
Sending Accounting-Response of id 212 to 192.168.21.180 port 47408
Fri Feb 17 12:37:13 2017 : Info: Finished request 4.
Fri Feb 17 12:37:13 2017 : Info: Cleaning up request 4 ID 212 with timestamp +1025
Fri Feb 17 12:37:13 2017 : Debug: Going to the next request
Fri Feb 17 12:37:13 2017 : Debug: Waking up in 4.9 seconds.
rad_recv: Accounting-Request packet from host 192.168.21.180 port 53219, id=213, length=187
Service-Type = Framed-User
Framed-Protocol = PPP
NAS-Port = 72
NAS-Port-Type = Virtual
User-Name = “ahmed”
Calling-Station-Id = “192.168.21.110”
Called-Station-Id = “192.168.21.180”
Acct-Session-Id = “81300035”
Framed-IP-Address = 0.0.0.0
Acct-Authentic = RADIUS
Event-Timestamp = “Jan 2 2005 21:17:03 GMT”
Acct-Session-Time = 0
Acct-Input-Octets = 0
Acct-Input-Gigawords = 0
Acct-Input-Packets = 0
Acct-Output-Octets = 28
Acct-Output-Gigawords = 0
Acct-Output-Packets = 3
Acct-Status-Type = Stop
Acct-Terminate-Cause = User-Request
NAS-Identifier = “MikroTik”
The accounting starts and stops immediately. can you please let me know if anything i am missing
Thanks
Ahmed