Failed to authenticate an Active Directory User

Matthew Newton mcn4 at leicester.ac.uk
Tue Apr 5 18:24:59 CEST 2016


On Tue, Apr 05, 2016 at 08:32:24AM +0000, TOURE Amidou Florian via Freeradius-Users wrote:
> Hi all ,When trying to authenticate a user against Active
> Directory I got this errorMon Apr  4 10:37:21 2016 : Auth: Login
> incorrect: [Prof-PC\\Prof] (from client
> 192.168.1.5/255.255.255.0 port 50002 cli 00:40:d0:67:d0:b1)

> Mon Apr  4 10:39:45 2016 : Auth: Login incorrect (mschap:
> External script says Logon failure (0xc000006d)):
> [Prof-PC\\Prof] (from client 192.168.1.5/255.255$

Well, it says you're trying to log in as user "Prof-PC\\Prof" amd
the login was incorrect.

You've chopped out all the useful debug, so I'll have to guess
that you're calling ntlm_auth, and that is the external script. In
which case, debug it by running ntlm_auth manually on the RADIUS
server to make sure that bit works, then start investigating what
comes from the client.

0xc000006d should mean the username or password isn't correct
(hence "logon failure").

Matthew


-- 
Matthew Newton, Ph.D. <mcn4 at le.ac.uk>

Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253, <ithelp at le.ac.uk>


More information about the Freeradius-Users mailing list