<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
--></style>
</head>
<body class='hmmessage'>
Good morning fellas,<br><br>After several unsuccessful attempts I could install Freeradius with OpenSSL support for do ntlm_auth for the users with Active Directory integration. The problem is, when the windows xp machine try to connect to the wireless network, Freeradius (or windows xp machine, reallly dont know) doesn't fill the password field like user-name does. So, Any one knows why it is happening? Because for this reason I get the error in the auithentication (Exec-Program output: NT_STATUS_WRONG_PASSWORD: Wrong Password
(0xc000006a) <br>
Exec-Program-Wait: plaintext: NT_STATUS_WRONG_PASSWORD: Wrong Password
(0xc000006a) )<br><br>Listening on authentication address * port 1645<br>Listening on accounting address * port 1646<br>Listening on proxy address * port 1647<br>Ready to process requests.<br>rad_recv: Access-Request packet from host "AP's IP" port 1645, id=76, length=181<br> User-Name = "MYDOMAIN\\ortegaca"<br> Framed-MTU = 1400<br> Called-Station-Id = "0015.62c8.75d0"<br> Calling-Station-Id = "001f.3c2d.78d6"<br> Cisco-AVPair = "ssid=radiusd"<br> Service-Type = Login-User<br> Message-Authenticator = 0x3408edc72d37acf533d28f0b24f43f81<br> EAP-Message = 0x02020017015044565341323030305c6f72746567616361<br> NAS-Port-Type = Wireless-802.11<br> Cisco-NAS-Port = "3259"<br> NAS-Port = 3259<br> NAS-IP-Address = "AP's IP"<br> NAS-Identifier = "ap"<br>+- entering group authorize {...}<br>[ntlm_auth] expand: --username=%{mschap:User-Name} -> --username=ortegaca<br>[ntlm_auth] expand: --password=%{User-Password} -> --password=<br>Exec-Program output: NT_STATUS_WRONG_PASSWORD: Wrong Password (0xc000006a) <br>Exec-Program-Wait: plaintext: NT_STATUS_WRONG_PASSWORD: Wrong Password (0xc000006a) <br>Exec-Program: returned: 1<br>++[ntlm_auth] returns reject<br>Using Post-Auth-Type Reject<br>+- entering group REJECT {...}<br>[attr_filter.access_reject] expand: %{User-Name} -> PDVSA2000\ortegaca<br> attr_filter: Matched entry DEFAULT at line 11<br>++[attr_filter.access_reject] returns updated<br>Delaying reject of request 0 for 1 seconds<br>Going to the next request<br>Waking up in 0.7 seconds.<br>Sending delayed reject for request 0<br>Sending Access-Reject of id 76 to "AP's IP" port 1645<br>Waking up in 4.9 seconds.<br>Cleaning up request 0 ID 76 with timestamp +17<br>Ready to process requests.<br><br>Thanks in advance,<br><br>Cesar<br> <br /><hr />Explore the seven wonders of the world <a href='http://search.msn.com/results.aspx?q=7+wonders+world&mkt=en-US&form=QBRE' target='_new'>Learn more!</a></body>
</html>