<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7654.12">
<TITLE>FreeRadius Authentication using Active Directory</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P><FONT SIZE=2 FACE="Arial">I have followed several tutorials for setting up Active Directory with FreeRadius. When I run the ntlm_auth from the command line I get a success message however when I run the radtest with the username and password I get a Access-Reject. I am using FreeRadius 1.8 and I have included the message I get from radiusd -X. Any input would be greatly appreciated.</FONT></P>
<BR>
<P><FONT SIZE=2 FACE="Arial">rad_recv: Access-Request packet from host 10.1.174.126:3421, id=26, length=49</FONT>
<BR><FONT SIZE=2 FACE="Arial"> User-Name = "testuser"</FONT>
<BR><FONT SIZE=2 FACE="Arial"> User-Password = "testpassword"</FONT>
<BR><FONT SIZE=2 FACE="Arial"> Processing the authorize section of radiusd.conf</FONT>
<BR><FONT SIZE=2 FACE="Arial">modcall: entering group authorize for request 3</FONT>
<BR><FONT SIZE=2 FACE="Arial"> modcall[authorize]: module "preprocess" returns ok for request 3</FONT>
<BR><FONT SIZE=2 FACE="Arial"> modcall[authorize]: module "chap" returns noop for request 3</FONT>
<BR><FONT SIZE=2 FACE="Arial"> modcall[authorize]: module "mschap" returns noop for request 3</FONT>
<BR><FONT SIZE=2 FACE="Arial"> rlm_realm: No '@' in User-Name = "jmcsparin", looking up realm NULL</FONT>
<BR><FONT SIZE=2 FACE="Arial"> rlm_realm: No such realm "NULL"</FONT>
<BR><FONT SIZE=2 FACE="Arial"> modcall[authorize]: module "suffix" returns noop for request 3</FONT>
<BR><FONT SIZE=2 FACE="Arial"> rlm_eap: No EAP-Message, not doing EAP</FONT>
<BR><FONT SIZE=2 FACE="Arial"> modcall[authorize]: module "eap" returns noop for request 3</FONT>
<BR><FONT SIZE=2 FACE="Arial"> modcall[authorize]: module "files" returns notfound for request 3</FONT>
<BR><FONT SIZE=2 FACE="Arial">rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this.</FONT>
<BR><FONT SIZE=2 FACE="Arial"> modcall[authorize]: module "pap" returns noop for request 3</FONT>
<BR><FONT SIZE=2 FACE="Arial">modcall: leaving group authorize (returns ok) for request 3</FONT>
<BR><FONT SIZE=2 FACE="Arial">auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user</FONT>
<BR><FONT SIZE=2 FACE="Arial">auth: Failed to validate the user.</FONT>
</P>
<P><FONT SIZE=2 FACE="Calibri">Joseph R. McSparin<BR>
Network Administrator<BR>
Hill Country Memorial Hospital<BR>
830 990 6638 phone<BR>
830 990 6623 fax<BR>
jmcsparin@hillcountrymemorial.org</FONT>
</P>
</BODY>
</HTML>
<BR><HR>
<p class="MsoNormal"><font size="2" face="Arial"><span style="font-size: 10pt; font-family: Arial;"><font size="1"><span style="font-family: tahoma,arial,helvetica,sans-serif;">This email message and any
attachments are for the sole use of the intended recipient(s) and contain
confidential and/or privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended recipient,
please contact the sender by reply email and destroy all copies of the original
message and any attachments.</span></font><o:p /></span></font></p>