freeRADIUS -> AD Auth (<100kb)

[Stefan Paetow]

Here’s your problem:

        ntlm_auth = "/etc/freeradius/modules/ntlm_auth --request-nt-key --domain=OBLAN --username==%{%{User-Name}:-None}}"

You have to set ntlm_auth to the path of the ntlm_auth binary… not the FreeRADIUS module.

It usually lives in /usr/bin. ‘which ntlm_auth’ usually tells you where.

Stefan


From: freeradius-users-bounces+stefan.paetow=ja.net at lists.freeradius.org [mailto:freeradius-users-bounces+stefan.paetow=ja.net at lists.freeradius.org] On Behalf Of nfischer at hush.com
Sent: 13 August 2014 09:59
To: freeradius-users at lists.freeradius.org
Subject: freeRADIUS -> AD Auth (<100kb)

Hi there!

I have a problem with the auth against an Active Directory.
I would be very thankfull if you could help me.

Im tring to setup an WiFi Network where the Useres can auth with their AD Useraccs,

Setup:
WiFi-Router with DD-WRT
Ubuntu 10.04LTS with FreeRADIUS kerberus samba etc.
AD at a Windows Server 2008 SBS (Total mess never install it!)

The communicatuion W-Lan Client->Router->FreeRADIUS runs.
The Ubuntu Server is in the Domain, wbinfo -u gives me all Users.
The auth via NTLM_AUTH runns too:
/etc/freeradius$ ntlm_auth --request-nt-key --domain=DOMAINNAME --username=USERNAME
Password:
NT_STATUS_OK: Success (0x0)

I think just FreeRADIUS is configured wrong.
The auth fails, respectively does not take place.

I put the config files and the freeradius -X output in the attachment.
(I removed a few unimportant configfiles to not hit the 100kb limit of this mailinglist.)

Many thanks in advance!

--
Mit freundlichem Gruß
Nicolas Fischer

email: nfischer at hush.com<mailto:nfischer at hush.com>
jabber: jagger at jabber.ccc.de<mailto:jagger at jabber.ccc.de>
tel: 01573-0420888
Skype: jagger64
TOX: Just ask me :)

PGP-Key:
http://keyserver.ubuntu.com/pks/lookup?op=vindex&fingerprint=on&search=0xCF5E6AD15A5B6132
If you sent me a PGP Crypted Mail I´ll be happy and will give you a free cookie :)

Janet(UK) is a trading name of Jisc Collections and Janet Limited, a 
not-for-profit company which is registered in England under No. 2881024 
and whose Registered Office is at Lumen House, Library Avenue,
Harwell Oxford, Didcot, Oxfordshire. OX11 0SG. VAT No. 614944238

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20140813/42760f29/attachment-0001.html>