The problem persists with escaped username (it's Administrator in UTF-8 in russian):<br><br>Found Auth-Type = EAP<br>+- entering group authenticate {...}<br>[eap] Request found, released from the list<br>[eap] EAP/mschapv2<br>
[eap] processing type mschapv2<br>[mschapv2] +- entering group MS-CHAP {...}<br>[mschap] Told to do MS-CHAPv2 for Администратор with NT-Password<br>[mschap] expand: --username="%{mschap:User-Name}" -> --username="Администратор"<br>
[mschap] expand: --domain=%{mschap:NT-Domain} -> --domain=CITYHALL<br>[mschap] mschap2: d6<br>[mschap] expand: --challenge=%{mschap:Challenge:-00} -> --challenge=dcc735f9e06566f6<br>[mschap] expand: --nt-response=%{mschap:NT-Response:-00} -> --nt-response=3a160d20c9f584afd0024f676305fba382955db43d2a39e1<br>
Exec-Program output: Invalid parameter (0xc000000d) <br>Exec-Program-Wait: plaintext: Invalid parameter (0xc000000d) <br>Exec-Program: returned: 1<br>[mschap] External script failed.<br>[mschap] FAILED: MS-CHAP2-Response is incorrect<br>
++[mschap] returns reject<br>[eap] Freeing handler<br>++[eap] returns reject<br>Failed to authenticate the user.<br><br>...<br><br>ntlm_auth successfully authenticates returning NT_KEY when run manually:<br><br>ntlm_auth --diagnostics --request-nt-key --username="Администратор" --domain=CITYHALL --challenge=86c94cfffd3f36fa --nt-response=3fa59f14170c3c64156be08dce431349620d99bc9f74cb79<br>
NT_KEY: EB6DA41D01DE9C2F6ADA05D91346881E<br><br>