Rewrite domain

David Rodríguez Fernández davidrf at zdn.es
Thu Aug 27 12:56:57 CEST 2009


That is my ntlm_auth:
ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key
--domain=%{mschap:NT-DOMAIN} --username=%{mschap:User-Name}
--challenge=%{mschap:Challenge:-00}
--nt-response=%{mschap:NT-Response:-00}"

What i can change to fix that?


On Thu, Aug 27, 2009 at 12:16, Ivan Kalik<tnt at kalik.net> wrote:
>> I have a wifi with wpa2, with peap and mschap2, with db users with
>> active directory, and all is working fine if my users log in with:
>>
>> WINDOWSDOMAIN\userlogin
>>
>> as username, but if the users auth as userlogin, the server reply:
>> Auth: Login incorrect (rlm_mschap: No such user (0xc0000064)):
>>
>> There's a method to rewrite the login name to add WINDOWSDOMAIN\ to
>> the beginning of login or to make that radius add a default domain to
>> all users?
>
> Yes, but that would break EAP. Don't do that. It's better to fix the
> domain on the ntlm_auth line.
>
> Ivan Kalik
> Kalik Informatika ISP
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>



More information about the Freeradius-Users mailing list