<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt"><div>Thank you Ivan for the response.<br><br>yes, i first supplied the entired output of radiusd -X, but the mail was too long and was expected to be moderate. so i cut it. I will try to send a mschap request and see.<br><br><br></div><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><div style="font-family: arial,helvetica,sans-serif; font-size: 13px;">------<br><br>ntlm_auth is in mschap module and you are sending a pap request. Test<br>with mschap (or real peap user). BTW that's not " the entire output of<br>RADIUSD -X." It's radtest output.<br><br>Ivan Kalik<br>Kalik Informatika ISP<br><br><br>Dana 15/7/2008, "Reveal MAP" <<a ymailto="mailto:revealmapp@yahoo.fr" href="mailto:revealmapp@yahoo.fr">revealmapp@yahoo.fr</a>> piše:<br><br>>Hello
list!<br>><br>>after<br>>i succeed creating my CA, (thanks a lot sergio), i encounter a new<br>>problem with Active Directory integration! i succeded it with help of<br>>this mailing list a couple of week ago, but in FR-2.0.2.<br>><br>>Now i use FR-2.0.5.<br>>I<br>>followed the HOWTO, so ntlm_auth and winbind authenticate successfully.<br>>i didn't take a look at winbind_priviledge yet, but, when i try to<br>>authenticate with a user of existing in active Directory (using<br>>radtest), it just reject the user without no more message (taht i could<br>>interpretate to find what is missing).<br>><br>><br>><br>>i set in /etc/raddb/module/mschap that lines:<br>>----------------------------------------------------------------------------------------------<br>>mschap {<br>> use_mppe = yes<br>> #require_encryption = yes<br>> #require_strong =
yes<br>> with_ntdomain_hack = yes<br>> <br>>ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key<br>>--username=%{mschap:User-Name} --challenge=%{mschap:Challenge:-00}<br>>--nt-response=%{mschap:NT-Response:-00}"<br>>}<br>><br>>but still noticed this line on the ouput too (at radiusd -X startup):<br>>----------------------------------------------------------------------------------------------<br>>Module: Linked to sub-module rlm_eap_mschapv2<br>> Module: Instantiating eap-mschapv2<br>> mschapv2 {<br>> with_ntdomain_hack = no //shouldn't it be yes instead of no here?<br>>-------------------------------------------------------------------------------------------------<br>><br>><br>>here is the entire output of RADIUSD -X. thanx for help:<br>>--------------------------------------------------------------------------------------------<br>>aaa:~ #
radtest glouglou glouglou localhost 1812 testing123<br>>Sending Access-Request of id 74 to 127.0.0.1 port 1812<br>> User-Name = "glouglou"<br>> User-Password = "glouglou"<br>> NAS-IP-Address = 127.0.0.2<br>> NAS-Port = 1812<br>>rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=74, length=20<br>>--------------------------------------------------------------------------------------------<br>><br>><br>><br>> _____________________________________________________________________________ <br>>Envoyez avec Yahoo! Mail. Une boite mail plus intelligente <a href="http://mail.yahoofr" target="_blank">http://mail.yahoofr</a><br>><br><br>-<br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html"
target="_blank">http://www.freeradius.org/list/users.html</a><br></div></div></div><br>
<hr size="1">
Envoyé avec <a href="http://us.rd.yahoo.com/mailuk/taglines/isp/control/*http://us.rd.yahoo.com/evt=52423/*http://fr.docs.yahoo.com/mail/overview/index.html">Yahoo! Mail</a>.<br>Une boite mail plus intelligente. </a></body></html>