Page 1 of 1

sofether/radius/multiotp/windows client

Posted: Mon Nov 06, 2023 10:22 am
by cborivant
Hello,

I'm trying to authenticate my vpn users through a radius server running multiOTP.
The authentication works well but my users can't connect successfully. The are using the windows 10 native client and the vpn is a L2TP vpn with a shared secret.
When they try to connect, I can see in the logs of the radius server that the authentication is OK but the VPN client keeps saying the authentication failed.
Does anyone know what could happen ?

Re: softether/radius/multiotp/windows client

Posted: Mon Nov 06, 2023 3:42 pm
by cborivant
Ok the problem seems to happen only when using MS-CHAP v2. Using PAP works but is not very secured as the password is send in clear text.

Does anyone know how to make it work with MS-CHAP v2 ?

Re: sofether/radius/multiotp/windows client

Posted: Tue Nov 07, 2023 1:23 am
by solo
I've changed the type of VPN to Automatic, added the preshared key, and enable PAP and CHAP (even MS-CHAP V2).
After that, the authentication through Windows over IPSec worked perfectly with Radius authentication.
https://www.vpnusers.com/viewtopic.php? ... 9923#p9923