<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
--></style>
</head>
<body class='hmmessage'>
Thank you so much, you were right, once more as it seems, I've just downgraded samba to native version (3.2.5) on my Debian Lenny and it works !<br>I had'nt managed to have samba 3.2.5 working the first time so I have tried 3.5.3 but with the same .conf, it works perfectly.<br><br>> Date: Mon, 21 Jun 2010 16:46:05 +0200<br>> From: aland@deployingradius.com<br>> To: freeradius-users@lists.freeradius.org<br>> Subject: Re: eduroam PEAP + TTLS<br>> <br>> Jean-Philippe Ghibaudo wrote:<br>> > I need to have EAP-TTLS working with LDAP bind and PEAP-MSCHAPV2 with<br>> > Samba + Winbind + Active Directory.<br>> <br>> That should be possible. Follow the guides, and it should work.<br>> <br>> > I've got winbind very unstable... I can successfully authenticate using<br>> > eapol_test but a few minutes later, I've got a<br>> > MPPE keys mismatch. If I restart winbind, I can authenticate few times<br>> > and then, it stops working.<br>> <br>> That sounds like a Samba problem. See<br>> <br>> https://bugzilla.samba.org/show_bug.cgi?id=6563<br>> <br>> > I'm not really sure to understand how I have to set "Auth-Type" in<br>> > inner-tunnel and/or default (sites-enabled).<br>> <br>> Don't. Leave the defaults alone. Only make the changes which are<br>> recommended by the guides (e.g. deployingradius.com)<br>> <br>> > I've got :<br>> ...<br>> > in the authenticate section. I've got mschap then ldap in authorize section.<br>> > <br>> > Is there a mistake here ?<br>> <br>> No.<br>> <br>> > This is the end of the output of eapol_test for PEAP when it fails :<br>> ..<br>> > EAP-MSCHAPV2: Invalid authenticator response in success request<br>> <br>> It looks like that Samba bug.<br>> <br>> Alan DeKok.<br>> -<br>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html<br> <br /><hr />Vous voulez protéger votre numéro de CB ? <a href='http://clk.atdmt.com/FRM/go/232102479/direct/01/' target='_new'>Utilisez Internet Explorer 8</a></body>
</html>