<br><font size=2 face="sans-serif">Ok, Alan:</font>
<br>
<br><font size=2 face="sans-serif">Thanks ... It works ...</font>
<br>
<br><font size=2 face="sans-serif">Now I am trying to "Configuring my FreeRadius to use ntlm_auth for MS-CHAP" to authenticate my NT users, ok ?</font>
<br>
<br><font size=2 face="sans-serif">After that I configure the radiusd.conf file with the necessary changes (about ntlm_auth)</font><font size=2><tt>, I am trying to test the authenticate with a valid user of my NT Domain (by radtest) and the FreeRadius reject it.</tt></font>
<br>
<br><font size=2><tt>The output of my FreeRadiusīs console:</tt></font>
<br>
<br><font size=2><tt>[root@FreeRADIUS /usr/local/etc/raddb]# radtest copel\charles password localhost 0 testfreeradius</tt></font>
<br><font size=2><tt>Sending Access-Request of id 123 to 127.0.0.1 port 1812</tt></font>
<br><font size=2><tt> User-Name = "copelcharles"</tt></font>
<br><font size=2><tt> User-Password = "password"</tt></font>
<br><font size=2><tt> NAS-IP-Address = 255.255.255.255</tt></font>
<br><font size=2><tt> NAS-Port = 0</tt></font>
<br><font size=2><tt>rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=123, length=20</tt></font>
<br>
<br><font size=2><tt>The complete output of Radiusd -X:</tt></font>
<br>
<br><font size=2><tt>Ready to process requests.</tt></font>
<br><font size=2><tt>rad_recv: Access-Request packet from host 127.0.0.1:52444, id=67, length=64</tt></font>
<br><font size=2><tt> User-Name = "copelcharles"</tt></font>
<br><font size=2><tt> User-Password = "password"</tt></font>
<br><font size=2><tt> NAS-IP-Address = 255.255.255.255</tt></font>
<br><font size=2><tt> NAS-Port = 0</tt></font>
<br><font size=2><tt> Processing the authorize section of radiusd.conf</tt></font>
<br><font size=2><tt>modcall: entering group authorize for request 0</tt></font>
<br><font size=2><tt> modcall[authorize]: module "preprocess" returns ok for request 0</tt></font>
<br><font size=2><tt> modcall[authorize]: module "chap" returns noop for request 0</tt></font>
<br><font size=2><tt> modcall[authorize]: module "mschap" returns noop for request 0</tt></font>
<br><font size=2><tt> rlm_realm: No '@' in User-Name = "copelcharles", looking up realm NULL</tt></font>
<br><font size=2><tt> rlm_realm: No such realm "NULL"</tt></font>
<br><font size=2><tt> modcall[authorize]: module "suffix" returns noop for request 0</tt></font>
<br><font size=2><tt> rlm_eap: No EAP-Message, not doing EAP</tt></font>
<br><font size=2><tt> modcall[authorize]: module "eap" returns noop for request 0</tt></font>
<br><font size=2><tt> users: Matched entry DEFAULT at line 153</tt></font>
<br><font size=2><tt> modcall[authorize]: module "files" returns ok for request 0</tt></font>
<br><font size=2><tt>rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this.</tt></font>
<br><font size=2><tt> modcall[authorize]: module "pap" returns noop for request 0</tt></font>
<br><font size=2><tt>modcall: leaving group authorize (returns ok) for request 0</tt></font>
<br><font size=2><tt> rad_check_password: Found Auth-Type System</tt></font>
<br><font size=2><tt>auth: type "System"</tt></font>
<br><font size=2><tt> Processing the authenticate section of radiusd.conf</tt></font>
<br><font size=2><tt>modcall: entering group authenticate for request 0</tt></font>
<br><font size=2><tt> modcall[authenticate]: module "unix" returns notfound for request 0</tt></font>
<br><font size=2><tt>modcall: leaving group authenticate (returns notfound) for request 0</tt></font>
<br><font size=2><tt>auth: Failed to validate the user.</tt></font>
<br><font size=2><tt>Delaying request 0 for 1 seconds</tt></font>
<br><font size=2><tt>Finished request 0</tt></font>
<br><font size=2><tt>Going to the next request</tt></font>
<br><font size=2><tt>--- Walking the entire request list ---</tt></font>
<br><font size=2><tt>Waking up in 1 seconds...</tt></font>
<br><font size=2><tt>--- Walking the entire request list ---</tt></font>
<br><font size=2><tt>Waking up in 1 seconds...</tt></font>
<br><font size=2><tt>--- Walking the entire request list ---</tt></font>
<br><font size=2><tt>Sending Access-Reject of id 67 to 127.0.0.1 port 52444</tt></font>
<br><font size=2><tt>Waking up in 4 seconds...</tt></font>
<br><font size=2><tt>--- Walking the entire request list ---</tt></font>
<br><font size=2><tt>Cleaning up request 0 ID 67 with timestamp 46ea9900</tt></font>
<br><font size=2><tt>Nothing to do. Sleeping until we see a request.</tt></font>
<br><font size=2><tt>rad_recv: Access-Request packet from host 127.0.0.1:50643, id=123, length=64</tt></font>
<br><font size=2><tt> User-Name = "copelcharles"</tt></font>
<br><font size=2><tt> User-Password = "password"</tt></font>
<br><font size=2><tt> NAS-IP-Address = 255.255.255.255</tt></font>
<br><font size=2><tt> NAS-Port = 0</tt></font>
<br><font size=2><tt> Processing the authorize section of radiusd.conf</tt></font>
<br><font size=2><tt>modcall: entering group authorize for request 1</tt></font>
<br><font size=2><tt> modcall[authorize]: module "preprocess" returns ok for request 1</tt></font>
<br><font size=2><tt> modcall[authorize]: module "chap" returns noop for request 1</tt></font>
<br><font size=2><tt> modcall[authorize]: module "mschap" returns noop for request 1</tt></font>
<br><font size=2><tt> rlm_realm: No '@' in User-Name = "copelcharles", looking up realm NULL</tt></font>
<br><font size=2><tt> rlm_realm: No such realm "NULL"</tt></font>
<br><font size=2><tt> modcall[authorize]: module "suffix" returns noop for request 1</tt></font>
<br><font size=2><tt> rlm_eap: No EAP-Message, not doing EAP</tt></font>
<br><font size=2><tt> modcall[authorize]: module "eap" returns noop for request 1</tt></font>
<br><font size=2><tt> users: Matched entry DEFAULT at line 153</tt></font>
<br><font size=2><tt> modcall[authorize]: module "files" returns ok for request 1</tt></font>
<br><font size=2><tt>rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this.</tt></font>
<br><font size=2><tt> modcall[authorize]: module "pap" returns noop for request 1</tt></font>
<br><font size=2><tt>modcall: leaving group authorize (returns ok) for request 1</tt></font>
<br><font size=2><tt> rad_check_password: Found Auth-Type System</tt></font>
<br><font size=2><tt>auth: type "System"</tt></font>
<br><font size=2><tt> Processing the authenticate section of radiusd.conf</tt></font>
<br><font size=2><tt>modcall: entering group authenticate for request 1</tt></font>
<br><font size=2><tt> modcall[authenticate]: module "unix" returns notfound for request 1</tt></font>
<br><font size=2><tt>modcall: leaving group authenticate (returns notfound) for request 1</tt></font>
<br><font size=2><tt>auth: Failed to validate the user.</tt></font>
<br><font size=2><tt>Delaying request 1 for 1 seconds</tt></font>
<br><font size=2><tt>Finished request 1</tt></font>
<br><font size=2><tt>Going to the next request</tt></font>
<br><font size=2><tt>--- Walking the entire request list ---</tt></font>
<br><font size=2><tt>Waking up in 1 seconds...</tt></font>
<br><font size=2><tt>--- Walking the entire request list ---</tt></font>
<br><font size=2><tt>Waking up in 1 seconds...</tt></font>
<br><font size=2><tt>--- Walking the entire request list ---</tt></font>
<br><font size=2><tt>Sending Access-Reject of id 123 to 127.0.0.1 port 50643</tt></font>
<br><font size=2><tt>Waking up in 4 seconds...</tt></font>
<br><font size=2><tt>--- Walking the entire request list ---</tt></font>
<br><font size=2><tt>Cleaning up request 1 ID 123 with timestamp 46ea9dec</tt></font>
<br><font size=2><tt>Nothing to do. Sleeping until we see a request.</tt></font>
<br>
<br><font size=2 face="sans-serif">My samba is ok , I get to authenticate this user by "ntlm_auth" command line.</font>
<br>
<br><font size=2 face="sans-serif">Any Idea ?</font>
<br><font size=2 face="sans-serif">Thanks,</font>
<br><font size=2 face="sans-serif">Charles.<br>
</font>
<br>
<br>
<br>
<table width=100%>
<tr valign=top>
<td>
<td><font size=1 face="sans-serif"><b>Alan DeKok <aland@deployingradius.com></b></font>
<br><font size=1 face="sans-serif">Enviado Por: freeradius-users-bounces@lists.freeradius.org</font>
<p><font size=1 face="sans-serif">14/09/2007 10:32</font>
<br><font size=1 face="sans-serif">Favor responder a FreeRadius users mailing list</font>
<p>
<td><font size=1 face="Arial"> </font>
<br><font size=1 face="sans-serif"> Para: FreeRadius users mailing list <freeradius-users@lists.freeradius.org></font>
<br><font size=1 face="sans-serif"> cc: </font>
<br><font size=1 face="sans-serif"> cco: Charles Alcantara Borba/COPEL</font>
<br><font size=1 face="sans-serif"> Assunto: Re: Configuring FreeRADIUS to use ntlm_auth</font></table>
<br>
<br>
<br><font size=2 face="Courier New">charles@copel.com wrote:<br>
> After I configure the users file with "user Auth-Type :=<br>
> ntlm_auth" (for testing purposes only), my FreeRadius donīt start and<br>
> show the followings errors:<br>
> <br>
> /usr/local/etc/raddb/users[1]: Parse error (check) for entry user:<br>
> Unknown value ntlm_auth for attribute Auth-Type<br>
<br>
You also have to list "ntlm_auth" in the "authenticate" section.<br>
<br>
Alan DeKok.<br>
-<br>
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html<br>
</font>
<p>