<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
--></style>
</head>
<body class='hmmessage'>
Hi Alan,<br><br>Thanks for your response. It didn't work either, the output is:<br><br>Listening on authentication address * port 1645<br>Listening on accounting address * port 1646<br>Listening on proxy address * port 1647<br>Ready to process requests.<br>rad_recv: Access-Request packet from host "AP's IP" port 1645, id=91, length=181<br> User-Name = "MyDOMAIN\\ortegaca"<br> Framed-MTU = 1400<br> Called-Station-Id = "0015.62c8.75d0"<br> Calling-Station-Id = "001f.3c2d.78d6"<br> Cisco-AVPair = "ssid=radiusd"<br> Service-Type = Login-User<br> Message-Authenticator = 0x96ffc01213282f492a9dfebcac5f5cf0<br> EAP-Message = 0x02020017015044565341323030305c6f72746567616361<br> NAS-Port-Type = Wireless-802.11<br> Cisco-NAS-Port = "3280"<br> NAS-Port = 3280<br> NAS-IP-Address = "AP's IP"<br> NAS-Identifier = "ap"<br>+- entering group authorize {...}<br>[ntlm_auth] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details<br>[ntlm_auth] ... expanding second conditional<br>[ntlm_auth] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details<br>[ntlm_auth] expand: %{User-Name:-None} -> MyDOMAIN\ortegaca<br>[ntlm_auth] expand: --username=%{Stripped-User-Name:-%{User-Name:-None}} -> --username=MyDOMAIN\ortegaca<br>[ntlm_auth] No MS-CHAP-Challenge in the request.<br>[ntlm_auth] expand: --challenge=%{mschap:Challenge:-00} -> --challenge=<br>[ntlm_auth] No MS-CHAP-Response or MS-CHAP2-Response was found in the request.<br>[ntlm_auth] expand: --nt-response=%{mschap:NT-Response:-00} -> --nt-response=<br>hex decode of failed! (only got 0 bytes)<br>Exec-Program output: <br>Exec-Program: returned: 1<br>++[ntlm_auth] returns reject<br>Using Post-Auth-Type Reject<br>+- entering group REJECT {...}<br>[attr_filter.access_reject] expand: %{User-Name} -> MyDOMAIN\ortegaca<br> attr_filter: Matched entry DEFAULT at line 11<br>++[attr_filter.access_reject] returns updated<br>Delaying reject of request 0 for 1 seconds<br>Going to the next request<br>Waking up in 0.9 seconds.<br>Sending delayed reject for request 0<br>Sending Access-Reject of id 91 to "AP's IP" port 1645<br>Waking up in 4.9 seconds.<br>rad_recv: Access-Request packet from host "AP's IP" port 1645, id=92, length=181<br> User-Name = "MyDOMAIN\\ortegaca"<br> Framed-MTU = 1400<br> Called-Station-Id = "0015.62c8.75d0"<br> Calling-Station-Id = "001f.3c2d.78d6"<br> Cisco-AVPair = "ssid=radiusd"<br> Service-Type = Login-User<br> Message-Authenticator = 0x33d0e749e1bb30e03f6bbe53e0601d27<br> EAP-Message = 0x02010017015044565341323030305c6f72746567616361<br> NAS-Port-Type = Wireless-802.11<br> Cisco-NAS-Port = "3281"<br> NAS-Port = 3281<br> NAS-IP-Address = "AP's IP"<br> NAS-Identifier = "ap"<br>+- entering group authorize {...}<br>[ntlm_auth] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details<br>[ntlm_auth] ... expanding second conditional<br>[ntlm_auth] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details<br>[ntlm_auth] expand: %{User-Name:-None} -> MyDOMAIN\ortegaca<br>[ntlm_auth] expand: --username=%{Stripped-User-Name:-%{User-Name:-None}} -> --username=MyDOMAIN\ortegaca<br>[ntlm_auth] No MS-CHAP-Challenge in the request.<br>[ntlm_auth] expand: --challenge=%{mschap:Challenge:-00} -> --challenge=<br>[ntlm_auth] No MS-CHAP-Response or MS-CHAP2-Response was found in the request.<br>[ntlm_auth] expand: --nt-response=%{mschap:NT-Response:-00} -> --nt-response=<br>hex decode of failed! (only got 0 bytes)<br>Exec-Program output: <br>Exec-Program: returned: 1<br>++[ntlm_auth] returns reject<br>Using Post-Auth-Type Reject<br>+- entering group REJECT {...}<br>[attr_filter.access_reject] expand: %{User-Name} -> MyDOMAIN\ortegaca<br> attr_filter: Matched entry DEFAULT at line 11<br>++[attr_filter.access_reject] returns updated<br>Delaying reject of request 1 for 1 seconds<br>Going to the next request<br>Waking up in 0.9 seconds.<br><br>As you can see above, there is something about the challenge but I really don't know what it is. So, again: What can I do for a transparent authentication against my Active Directory when a user is logged on it?.<br><br>Cesar<br><br><br><br><br><br><br> <br /><hr />Invite your mail contacts to join your friends list with Windows Live Spaces. It's easy! <a href='http://spaces.live.com/spacesapi.aspx?wx_action=create&wx_url=/friends.aspx&mkt=en-us' target='_new'>Try it!</a></body>
</html>