Hello list!
after
i succeed creating my CA, (thanks a lot sergio), i encounter a new
problem with Active Directory integration! i succeded it with help of
this mailing list a couple of week ago, but in FR-2.0.2.
Now i use FR-2.0.5.
I
followed the HOWTO, so ntlm_auth and winbind authenticate successfully.
i didn't take a look at winbind_priviledge yet, but, when i try to
authenticate with a user of existing in active Directory (using
radtest), it just reject the user without no more message (taht i could
interpretate to find what is missing).
i set in /etc/raddb/module/mschap that lines:
----------------------------------------------------------------------------------------------
mschap {
use_mppe = yes
#require_encryption = yes
#require_strong = yes
with_ntdomain_hack = yes
ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key
--username=%{mschap:User-Name} --challenge=%{mschap:Challenge:-00}
--nt-response=%{mschap:NT-Response:-00}"
}
but still noticed this line on the ouput too (at radiusd -X startup):
----------------------------------------------------------------------------------------------
Module: Linked to sub-module rlm_eap_mschapv2
Module: Instantiating eap-mschapv2
mschapv2 {
with_ntdomain_hack = no //shouldn't it be yes instead of no here?
-------------------------------------------------------------------------------------------------
here is the entire output of RADIUSD -X. thanx for help:
--------------------------------------------------------------------------------------------
aaa:~ # radtest glouglou glouglou localhost 1812 testing123
Sending Access-Request of id 74 to 127.0.0.1 port 1812
User-Name = "glouglou"
User-Password = "glouglou"
NAS-IP-Address = 127.0.0.2
NAS-Port = 1812
rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=74, length=20
--------------------------------------------------------------------------------------------