<br><br><div class="gmail_quote">2011/11/10 Phil Mayers <span dir="ltr"><<a href="mailto:p.mayers@imperial.ac.uk">p.mayers@imperial.ac.uk</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div class="im">On 10/11/11 08:15, Alejandro Gandara wrote:<br>
</div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">
Hi Alan,<br>
<br>
Thanks for your answers and excuse me for my english fill of mistakes.<br>
<br>
2011/11/10 Alan DeKok <<a href="mailto:aland@deployingradius.com" target="_blank">aland@deployingradius.com</a><br></div>
<mailto:<a href="mailto:aland@deployingradius.com" target="_blank">aland@deployingradius.<u></u>com</a>>><div class="im"><br>
<br>
Alejandro Gandara wrote:<br>
> I'm authenticating users in RADIUS against LDAP, if I login from<br>
> computer with 802.1x configured and users and password taken from<br>
domain<br>
> automatic. Im getting wrong authenticated because the login has the<br>
> following chain.<br>
><br>
> DOMAIN\\Users<br>
><br>
> How can i avoid that radius read the prefix?<br>
<br>
You should be able to authenticate using just the user name, using<br>
ntlm_auth. See the examples in raddb/modules/ntlm_auth<br>
<br>
<br>
Im reading about it. Thanks for this information.<br>
<br>
<br>
> I've tried to introduce the option prefix in<br>
/etc/sites-enable/default ,<br>
> but its getting me back errors because of wrong way to introduce<br>
that line.<br>
<br>
Yes. Don't define a realm. It won't work.<br>
<br>
Post the debug output. That helps, too.<br>
<br>
<br>
This is my debug output:<br>
<br>
rad_recv: Access-Request packet from host 172.20.40.28 port 1025,<br>
id=112, length=218<br>
Framed-MTU = 1480<br>
NAS-IP-Address = 172.20.40.28<br>
NAS-Identifier = "SW-INT-1-3"<br>
User-Name = "PRIVATE\\usertest"<br>
</div></blockquote>
<br>
Have you edited this debug?<div class="im"><br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Service-Type = Framed-User<br>
Framed-Protocol = PPP<br>
NAS-Port = 32<br>
NAS-Port-Type = Ethernet<br>
NAS-Port-Id = "32"<br>
Called-Station-Id = "f0-62-81-05-33-40"<br>
Calling-Station-Id = "f0-4d-a2-bc-77-cd"<br>
Connect-Info = "CONNECT Ethernet 1000Mbps Full duplex"<br>
Tunnel-Type:0 = VLAN<br>
Tunnel-Medium-Type:0 = IEEE-802<br>
Tunnel-Private-Group-Id:0 = "1"<br>
EAP-Message = 0x020a0012014f50544152455c6272<u></u>6f75636f<br>
</blockquote>
<br></div>
This decodes as:<br>
<br>
\x02\n\x00\x12\x01OPTARE\\<u></u>brouco<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Message-Authenticator = 0x055981a2c542df52f4c292042c89<u></u>a019<div class="im"><br>
Found Auth-Type = EAP<br>
# Executing group from file /etc/freeradius/sites-enabled/<u></u>default<br>
+- entering group authenticate {...}<br></div>
*[eap] Identity does not match User-Name, setting from EAP Identity.*<br>
</blockquote>
<br>
This claims MSCHAP and Radius username don't match.<br>
<br>
Did you edit the debug?<br>
<br>
Don't do that.<br></blockquote><div>Ok sorry <br></div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<br>
Please provide a full debug, like so:<br>
<br>
radiusd -X | tee log.txt<br>
# run a test auth<br>
# ctrl+c<br>
# email log.txt<div class="HOEnZb"><div class="h5"><br></div></div></blockquote><div>I've attached it<br><br> <br></div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div class="HOEnZb"><div class="h5">
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/<u></u>list/users.html</a><br>
</div></div></blockquote></div><br>