<table cellspacing="0" cellpadding="0" border="0" ><tr><td valign="top" style="font: inherit;"><DIV> It is debug info when I use freeRADIUS-1.1.6. </DIV>
<DIV> </DIV>
<DIV> rad_recv: Access-Request packet from host 10.155.20.85:32790, id=171, length=125<BR> --> Service-Type = Authorize-Only<BR> --> NAS-Port-Type = Wireless-802.11<BR> --> User-Name = "hhe"<BR> --> MS-CHAP-Challenge = 0x837a4fb32a47a5bda0c24d5e4329fcdc<BR> --> MS-CHAP2-Response = 0xe40069bdb5799e2fa75ccc2d53415669f4d900000000000000008cad47a91a94b2a475bda048fda283bf23e702b5129a3164<BR> --> NAS-IP-Address = 10.155.20.85<BR> Processing the authorize section of radiusd.conf<BR> modcall: entering group authorize for request 2<BR> modsingle[authorize]: calling chap (rlm_chap) for request 2<BR> modsingle[authorize]: returned from chap (rlm_chap) for request 2<BR> modcall[authorize]: module "chap" returns noop for request 2<BR> modsingle[authorize]: calling mschap (rlm_mschap) for request
2<BR> rlm_mschap: Found MS-CHAP attributes. Setting 'Auth-Type = mschap'<BR> modsingle[authorize]: returned from mschap (rlm_mschap) for request 2<BR> modcall[authorize]: module "mschap" returns ok for request 2<BR> modsingle[authorize]: calling eap (rlm_eap) for request 2<BR> rlm_eap: No EAP-Message, not doing EAP<BR> modsingle[authorize]: returned from eap (rlm_eap) for request 2<BR> modcall[authorize]: module "eap" returns noop for request 2<BR> modsingle[authorize]: calling ldap (rlm_ldap) for request 2<BR> rlm_ldap: - authorize<BR> rlm_ldap: performing user authorization for hhe<BR> radius_xlat: Running registered xlat function of module mschap for string 'User-Name'<BR> radius_xlat: '(sAMAccountName=hhe)'<BR> radius_xlat: 'dc=xjtu,dc=cn'<BR> rlm_ldap:
ldap_get_conn: Checking Id: 0<BR> rlm_ldap: ldap_get_conn: Got Id: 0<BR> rlm_ldap: No default NMAS login sequence<BR> rlm_ldap: looking for check items in directory...<BR> rlm_ldap: looking for reply items in directory...<BR> rlm_ldap: ldap_release_conn: Release Id: 0<BR> modsingle[authorize]: returned from ldap (rlm_ldap) for request 2<BR> modcall[authorize]: module "ldap" returns ok for request 2<BR> modsingle[authorize]: calling ldap (rlm_ldap) for request 2<BR> modsingle[authorize]: calling pap (rlm_pap) for request 2<BR> rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this.<BR> modsingle[authorize]: returned from pap (rlm_pap) for request 2<BR> modcall[authorize]: module "pap" returns noop for request 2<BR> modcall: leaving group authorize
(returns ok) for request 2<BR> rad_check_password: Found Auth-Type MS-CHAP<BR> auth: type "MS-CHAP"<BR> Processing the authenticate section of radiusd.conf<BR> modcall: entering group MS-CHAP for request 2<BR> modsingle[authenticate]: calling mschap (rlm_mschap) for request 2<BR> rlm_mschap: No User-Password configured. Cannot create LM-Password.<BR> rlm_mschap: No User-Password configured. Cannot create NT-Password.<BR> rlm_mschap: Told to do MS-CHAPv2 for hhe with NT-Password<BR> radius_xlat: Running registered xlat function of module mschap for string 'NT-Domain'<BR><FONT style="BACKGROUND-COLOR: #ffff00"> rlm_mschap: No NT-Domain was found in the User-Name.<BR> radius_xlat: '--domain=xjtu'</FONT><BR> radius_xlat: Running registered xlat function of module mschap for string
'User-Name'<BR> radius_xlat: '--username=hhe'<BR> radius_xlat: Running registered xlat function of module mschap for string 'Challenge'<BR> mschap2: 83<BR> radius_xlat: '--challenge=cfdb7016e508348d'<BR> radius_xlat: Running registered xlat function of module mschap for string 'NT-Response'<BR> radius_xlat: '--nt-response=8cad47a91a94b2a475bda048fda283bf23e702b5129a3164'<BR> rlm_mschap: adding MS-CHAPv2 MPPE keys<BR> modsingle[authenticate]: returned from mschap (rlm_mschap) for request 2<BR> modcall[authenticate]: module "mschap" returns ok for request 2<BR> modcall: leaving group MS-CHAP (returns ok) for request 2<BR> Sending Access-Accept of id 171 to 10.155.20.85 port 32790<BR> --> MS-CHAP2-Success =
0xe4533d41313535304434313643373437413542363236393941394135393532374335424630423438384537<BR> --> MS-MPPE-Recv-Key = 0x6ac9*<BR> --> MS-MPPE-Send-Key = 0xcfe2*<BR> --> MS-MPPE-Encryption-Policy = 0x00000001<BR> --> MS-MPPE-Encryption-Types = 0x00000006<BR> Finished request 2</DIV>
<DIV><BR><BR>--- <B>10年7月5日，周一, John <I><elmer_radius@yahoo.com.cn></I></B> 写道：<BR></DIV>
<BLOCKQUOTE style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: rgb(16,16,255) 2px solid"><BR>发件人: John <elmer_radius@yahoo.com.cn><BR>主题: Re: ntlm_auth fails for none domain<BR>收件人: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org><BR>日期: 2010年7月5日,周一,下午3:06<BR><BR>
<DIV id=yiv1488388620>
<TABLE cellSpacing=0 cellPadding=0 border=0>
<TBODY>
<TR>
<TD vAlign=top>
<DIV id=yiv2052707406>
<DIV>Yes. You are right. If I use <A href="http://cn.mc157.mail.yahoo.com/mc/compose?to=hhe@xjtu.cn" target=_blank rel=nofollow>hhe@xjtu.cn</A>, it will work.</DIV>
<DIV> </DIV>
<DIV>If I use old freeRADIUS-1.1.6, username "hhe" can work well. I think it is because I set default domain name "xjtu" in mschap module (ntlm_auth) . But freeRADIUS-2.1.9 could not work without domain. </DIV>
<DIV> </DIV>
<DIV>----</DIV>
<DIV>ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --domain=%{mschap:NT-Domain<FONT style="BACKGROUND-COLOR: #ff0000">:-xjtu</FONT>} --username=%{mschap:User-Name} --challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}"</DIV>
<DIV><BR><BR>--- <B>10年7月2日，周五, Alan DeKok <I><aland@deployingradius.com></I></B> 写道：<BR></DIV>
<BLOCKQUOTE style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: rgb(16,16,255) 2px solid"><BR>发件人: Alan DeKok <aland@deployingradius.com><BR>主题: Re: ntlm_auth fails for none domain<BR>收件人: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org><BR>日期: 2010年7月2日,周五,下午3:45<BR><BR>
<DIV class=plainMail>John wrote:<BR>> Hi,<BR>> It is the whole debug info. I think the problem is we could not get the<BR>> default domain name "xjtu".<BR><BR> Because the username does not include the domain.<BR><BR> Log in with "<A href="http://cn.mc157.mail.yahoo.com/mc/compose?to=hhe@xjtu.cn" target=_blank rel=nofollow>hhe@xjtu.cn</A>", and it will work.<BR><BR> Alan DeKok.<BR>-<BR>List info/subscribe/unsubscribe? See <A href="http://www.freeradius.org/list/users.html" target=_blank rel=nofollow>http://www.freeradius.org/list/users.html</A><BR></DIV></BLOCKQUOTE></DIV></TD></TR></TBODY></TABLE><BR> </DIV><BR>-----下面为附件内容-----<BR><BR>
<DIV class=plainMail>-<BR>List info/subscribe/unsubscribe? See <A href="http://www.freeradius.org/list/users.html" target=_blank>http://www.freeradius.org/list/users.html</A></DIV></BLOCKQUOTE></td></tr></table><br>