Freeradius with Active Directory

[Prashant A]

Hi Alan,

Yes. I was just using it for test purpose.

Meanwhile when I was testing using radtest it was freeradius log was 
showing.

(6)  Auth-Type MS-CHAP {
(6)*mschap : Client is using MS-CHAPv1 with NT-Password*
(6) mschap : Executing: /usr/bin/ntlm_auth --request-nt-key 
--username=%{mschap:User-Name:-None} 
--domain=%{%{mschap:NT-Domain}:-mycompany.local} 
--challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}

But from webpage the logs shows like this

(3) mschap : Creating challenge hash with username: prashant
(3)*mschap : Client is using MS-CHAPv2*
(3) mschap : Executing: /usr/bin/ntlm_auth --request-nt-key 
--username=%{mschap:User-Name:-None} 
--domain=%{%{mschap:NT-Domain}:-mycompany.local} 
--challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}

Doest this make any difference?


Thanks & Regards,
Prashant

On Monday 16 June 2014 05:58 PM, Alan DeKok wrote:
> Prashant A wrote:
>> I have followed the guide for integrating freeradius with active
>> directory which is mentioned here,
>    You do have to edit the configuration for your local site.
>
>> (0) mschap : Executing: /usr/bin/ntlm_auth --request-nt-key
>> --username=%{mschap:User-Name:-None}
>> --domain=%{%{mschap:NT-Domain}:-mycompany.local}
>    Really?  Is your AD domain called "mycompany.local" ?
>
>    Alan DeKok.
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20140616/4fb0b12f/attachment-0001.html>