<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7654.12">
<TITLE>Re: Talking to Windows 2003 AD </TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">Thanks Alan,</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">The double</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">‘</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri">==</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri">’</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri"> in the ntlm_auth command was the</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">culprit</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri">. Things are working today.</FONT></SPAN><SPAN LANG="en-gb"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">p.s.</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">I had already stripped the usernames and verified the password so that was fine.</FONT></SPAN><SPAN LANG="en-gb"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri">Iain Grant</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Linux System Administrator</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Scottish Crop Research Institute</FONT></SPAN></P>
<UL DIR=LTR><UL DIR=LTR><UL DIR=LTR><UL DIR=LTR>
<P DIR=LTR><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT FACE="Consolas">Date: Wed, 17 Mar 2010 17:23:37 +0000</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Consolas">From: Alan Buxey <A.L.M.Buxey@lboro.ac.uk></FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Consolas">Subject: Re: Talking to Windows 2003 AD</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Consolas">To: FreeRadius users mailing list</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"> <FONT FACE="Consolas"><freeradius-users@lists.freeradius.org></FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Consolas">Message-ID: <20100317172337.GA16756@lboro.ac.uk></FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Consolas">Content-Type: text/plain; charset=us-ascii</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Consolas">Hi,</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Consolas">> Now when I go to the next step and enable this in /etc/raddb/modules/mschap</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Consolas">> </FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Consolas">> ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --username==%{%{Stripped-User-Name}:-%{User-Name:-None}} --domain=%{%{mschap:NT-Domain}:-OURDOMAIN} --challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}"</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Consolas">radiusd -X</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Consolas">and show us at least that bit where that command is called.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Consolas">you have 2 == is your command. is that intentional? you are allowing usernames</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Consolas">that havent been sanitised or are blank (none) - is that intentional?</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Consolas">alan</FONT></SPAN></P>
</UL></UL></UL></UL>
<P DIR=LTR><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"></SPAN></P>
<BR>
______________________________________________________<BR>
SCRI, Invergowrie, Dundee, DD2 5DA. <BR>
The Scottish Crop Research Institute is a charitable company limited by guarantee. <BR>
Registered in Scotland No: SC 29367.<BR>
Recognised by the Inland Revenue as a Scottish Charity No: SC 006662.<BR>
<BR>
<BR>
DISCLAIMER:<BR>
<BR>
This email is from the Scottish Crop Research Institute, but the views expressed by the sender are not necessarily the views of SCRI and its subsidiaries. This email and any files transmitted with it are confidential to the intended recipient at the e-mail address to which it has been addressed. It may not be disclosed or used by any other than that<BR>
addressee.<BR>
If you are not the intended recipient you are requested to preserve this confidentiality and you must not use, disclose, copy, print or rely on this e-mail in any way. Please notify postmaster@scri.ac.uk quoting the name of the sender and delete the email from your system.<BR>
<BR>
Although SCRI has taken reasonable precautions to ensure no viruses are present in this email, neither the Institute nor the sender accepts any responsibility for any viruses, and it is your responsibility to scan the email and the attachments (if any).<BR>
______________________________________________________<BR>
</BODY>
</HTML>