User-Password attribute is not represented in IRadiusPacket

[OlegNadymov]

Hi!
I'm trying to write own IPacketHandler implementation. I need to have value of User-Password attribute there. But the radius packet doesn't have this attribute. The code packet.GetAttribute<string>("User-Password") returns null.

My client is Windows 10 Pro.
RDP with manual RD gateway. For test purpose I use the same server for RDP and RD gateway.

My server is Windows Server 2019 Standard with configured RD Gateway and Network Policy Server.

Central RD CAP options:

1. Local server running NPS.
2. Selfsigned certificate (installed as trusted in server as well as in client).

NPS options:

1. Radius client with server IP 172.16.-.-
2. Radius server with IP 127.0.0.1
3. Connection request policy with condition by Client Friendly Name.

My IPacketHandler implementation catches the request but this request doesn't have User-Password attribute.
My packet handler is very simple so far. I used the code from your TestPacketHandler.

Could you tell me where is a problem?

[vforteli]

I suspect it may be using chap authentication, in which case you would need to handle the chap challenge etc. Or even EAP tls or some other auth method

…

Sent from my iPhone

On 28. Jun 2020, at 0.49, Oleg ***@***.***> wrote:  Hi! I'm trying to write own IPacketHandler implementation. I need to have value of User-Password attribute there. But the radius packet doesn't have this attribute. The code packet.GetAttribute<string>("User-Password") returns null. My client is Windows 10 Pro. RDP with manual RD gateway. For test purpose I use the same server for RDP and RD gateway. My server is Windows Server 2019 Standard with configured RD Gateway and Network Policy Server. Central RD CAP options: Local server running NPS. Selfsigned certificate (installed as trusted in server as well as in client). NPS options: Radius client with server IP 172.16.-.- Radius server with IP 127.0.0.1 Connection request policy with condition by Client Friendly Name. My IPacketHandler implementation catches the request but this request doesn't have User-Password attribute. My packey handler is very simple so far as well as your TestPacketHandler. What do I do wrong? — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe.

[OlegNadymov]

@vforteli thanks for your answer! How can I handle these auth methods? If you have demo example, it will be great.

[OlegNadymov]

By the way, my example works only, if I have this option for NPS network policy:

If I check here other options here except the above one, my case will not work (cannot connect to server).