<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Nachricht</TITLE>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2900.2769" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=225495112-08112005><FONT face=Arial
size=2>Yohoo!</FONT></SPAN></DIV>
<DIV><SPAN class=225495112-08112005><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=225495112-08112005><FONT face=Arial size=2>I've a (for me)
strange problem mit ntlm_auth.</FONT></SPAN></DIV>
<DIV><SPAN class=225495112-08112005><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=225495112-08112005><FONT face=Arial size=2>I want to use
freeradius as an proxy for authentication against ActiveDirectory. So I've
installed winbind. "wbinfo -u" and "wbinfo -g" shows me the User and Grouplists.
Nice :)</FONT></SPAN></DIV>
<DIV><SPAN class=225495112-08112005><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=225495112-08112005><FONT face=Arial size=2>I've configured
freeradius like Alan DeKok showed in his posting from <FONT size=3><FONT
face="Times New Roman"><EM>Tue Jul 12 18:33:05 CEST
2005:</EM></FONT></FONT></FONT></SPAN></DIV>
<DIV><SPAN class=225495112-08112005>
<DIV><SPAN
class=225495112-08112005><EM>-----------snip---------------</EM></SPAN></DIV>modules
{<BR> ...<BR> exec win_domain {<BR> wait =
yes<BR> input_pairs =
request<BR> output_pairs =
reply<BR> program = "ntlm_auth
--username=\"%{User-Name}\" --password=\'%{User-Password}\'
--domain=mydomain"<BR> }<BR> ...<BR>}<BR><BR> Now list "win_domain" in the
"authenticate" section, and add the<BR>following entry to the "users"
file:<BR><BR>DEFAULT Auth-Type = win_domain<BR>
<DIV><SPAN class=225495112-08112005><EM>
<DIV><SPAN
class=225495112-08112005><EM>-----------snip---------------</EM></SPAN></DIV></EM></SPAN></DIV>
<DIV><SPAN class=225495112-08112005>When I start ntlm_auth on command
line:</SPAN></DIV>
<DIV><SPAN class=225495112-08112005><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=225495112-08112005><FONT face=Arial size=2>server:/#
/usr/bin/ntlm_auth --username='_web' --password='XXXXX!'
--domain=mydomain<BR>NT_STATUS_OK: Success (0x0)<BR></FONT></SPAN></DIV>
<DIV><SPAN class=225495112-08112005><FONT face=Arial size=2>All is ok.
:)</FONT></SPAN></DIV>
<DIV><SPAN class=225495112-08112005><FONT face=Arial size=2>Trying the same with
radtest:</FONT></SPAN></DIV>
<DIV><SPAN class=225495112-08112005><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=225495112-08112005><FONT face=Arial
size=2>ldaptest02:/etc/raddb# radtest "_web" 'XXXXX!' localhost 10
testing123</FONT></SPAN></DIV>
<DIV><SPAN class=225495112-08112005><FONT face=Arial size=2>Sending
Access-Request of id 75 to
127.0.0.1:1812<BR> User-Name =
"_web"<BR> User-Password =
"XXXXX!"<BR> NAS-IP-Address =
ldaptest<BR> NAS-Port =
10<BR>rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=75,
length=20<BR></FONT></SPAN></DIV>
<DIV><SPAN class=225495112-08112005><FONT face=Arial size=2>Nothing is ok
:-(</FONT></SPAN></DIV>
<DIV><SPAN class=225495112-08112005><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=225495112-08112005><FONT face=Arial
size=2>Logfiles:</FONT></SPAN></DIV>
<DIV><SPAN class=225495112-08112005><FONT face=Arial size=2>
<DIV><SPAN
class=225495112-08112005><EM>-----------snip---------------</EM></SPAN></DIV>Nov
8 13:58:57 ldaptest radiusd: modcall: group authorize returns ok for request
8<BR>Nov 8 13:58:57 ldaptest radiusd:
rad_check_password: Found Auth-Type win_domain<BR>Nov 8 13:58:57
ldaptest radiusd: auth: type "win_domain"<BR>Nov 8 13:58:57 ldaptest
radiusd: Processing the authenticate section of
radiusd.conf<BR>Nov 8 13:58:57 ldaptest radiusd: modcall: entering group
Auth-Type for request 8<BR>Nov 8 13:58:57 ldaptest radiusd:
radius_xlat: '/usr/bin/ntlm_auth --username='_web' --password='XXXXX!'
--domain=central'<BR>Nov 8 13:58:57 ldaptest radiusd: Exec-Program:
/usr/bin/ntlm_auth --username='_webman' --password='XXXXX!'
--domain=central</FONT></SPAN></DIV>
<DIV><SPAN class=225495112-08112005><FONT face=Arial size=2>Nov 8 13:58:57
ldaptest radiusd: Exec-Program output: NT_STATUS_NO_SUCH_USER: No such user
(0xc0000064)<BR>Nov 8 13:58:57 ldaptest radiusd: Exec-Program-Wait:
plaintext: NT_STATUS_NO_SUCH_USER: No such user (0xc0000064)<BR>Nov 8
13:58:57 ldaptest radiusd: Exec-Program: returned: 1<BR>Nov 8 13:58:57
ldaptest radiusd: rlm_exec (win_domain): External script failed<BR>Nov 8
13:58:57 ldaptest radiusd: modcall[authenticate]: module
"win_domain" returns fail for request 8<BR>
<DIV><SPAN
class=225495112-08112005><EM>-----------snip---------------</EM></SPAN></DIV>
<DIV><SPAN class=225495112-08112005><EM></EM></SPAN> </DIV>
<DIV><SPAN class=225495112-08112005>The line in the log is the same as I enter
it at command line. Why is the answer different?</SPAN></DIV>
<DIV><SPAN class=225495112-08112005></SPAN> </DIV>
<DIV><SPAN class=225495112-08112005>Thanks for your help and/ or ideas for
problem solution!</SPAN></DIV>
<DIV><SPAN class=225495112-08112005></SPAN> </DIV>
<DIV><SPAN class=225495112-08112005>Greets from Germany</SPAN></DIV>
<DIV><SPAN class=225495112-08112005></SPAN> </DIV>
<DIV><SPAN class=225495112-08112005>Christian</SPAN></DIV>
<DIV><SPAN
class=225495112-08112005></SPAN> </DIV></FONT></SPAN></DIV></SPAN></DIV></BODY></HTML>