<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt"><div><style type="text/css"><!--DIV {margin:0px;}--></style><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><div>Hello list!<br><br>after
i succeed creating my CA, (thanks a lot sergio), i encounter a new
problem with Active Directory integration! i succeded it with help of
this mailing list a couple of week ago, but in FR-2.0.2.<br><br>Now i use FR-2.0.5.<br>I
followed the HOWTO, so ntlm_auth and winbind authenticate successfully.
i didn't take a look at winbind_priviledge yet, but, when i try to
authenticate with a user of existing in active Directory (using
radtest), it just reject the user without no more message (taht i could
interpretate to find what is missing).<br><br><br><br><span style="font-weight: bold;">i set in /etc/raddb/module/mschap that lines:</span><br>----------------------------------------------------------------------------------------------<br>mschap {<br>
use_mppe = yes<br> #require_encryption = yes<br> #require_strong = yes<br> with_ntdomain_hack = yes<br>
ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key
--username=%{mschap:User-Name} --challenge=%{mschap:Challenge:-00}
--nt-response=%{mschap:NT-Response:-00}"<br>}<br><br><span style="font-weight: bold;">but still noticed this line on the ouput too</span> (at radiusd -X startup):<br>
----------------------------------------------------------------------------------------------<br>
Module: Linked to sub-module rlm_eap_mschapv2<br>
Module: Instantiating eap-mschapv2<br>
mschapv2 {<br>
with_ntdomain_hack = no <span style="font-weight: bold; color: rgb(255, 0, 127);"> //shouldn't it be yes instead of no here?</span><br>
-------------------------------------------------------------------------------------------------<br><br><br><span style="font-weight: bold;">here is the entire output of RADIUSD -X. thanx for help:</span><br>--------------------------------------------------------------------------------------------<br>aaa:~ # radtest glouglou glouglou localhost 1812 testing123<br>Sending Access-Request of id 74 to 127.0.0.1 port 1812<br> User-Name = "glouglou"<br> User-Password = "glouglou"<br> NAS-IP-Address = 127.0.0.2<br> NAS-Port = 1812<br>rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=74, length=20<br>--------------------------------------------------------------------------------------------<span style="font-style: italic;"><br></span></div></div></div></div><br>
<hr size="1">
Envoyé avec <a href="http://us.rd.yahoo.com/mailuk/taglines/isp/control/*http://us.rd.yahoo.com/evt=52423/*http://fr.docs.yahoo.com/mail/overview/index.html">Yahoo! Mail</a>.<br>Une boite mail plus intelligente. </a></body></html>