FreeRADIUS Active Directory Integration

[A.L.M.Buxey at lboro.ac.uk]

Hi,

>  [root at u701radius02 raddb]# ntlm_auth --request-nt-key --domain=dom002 --username=dw68406a --password=garrett05
> NT_STATUS_OK: Success (0x0)

good.


> +- entering group authorize {...}
> ++[preprocess] returns ok
> [ntlm_auth]     expand: --username=%{mschap:User-Name} -> --username=DW68406A
> [ntlm_auth]     expand: --password=%{User-Password} -> --password=
> Exec-Program output: NT_STATUS_WRONG_PASSWORD: Wrong Password (0xc000006a)
> Exec-Program-Wait: plaintext: NT_STATUS_WRONG_PASSWORD: Wrong Password (0xc000006a)
> Exec-Program: returned: 1
> ++[ntlm_auth] returns reject

no password supplied - %{Cleartext-Password}  instead? what makes you
think a password is supplied?  have you tried using the default ntlm_auth
line that comes with freeradius and just changing the --username part to
look like your chosen flavour (--domain is up to you...if needed)

alan