<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hi All,<br>
<br>
I have followed the guide for integrating freeradius with active
directory which is mentioned here,<br>
<br>
<a
href="http://deployingradius.com/documents/configuration/active_directory.html">http://deployingradius.com/documents/configuration/active_directory.html</a><br>
<br>
So finally,<br>
<br>
<tt>radtest -t mschap prashant Active@123 localhost 0 testing123 <br>
</tt><br>
Gives me following output<tt><br>
<br>
Sending Access-Request Id 40 from 0.0.0.0:54825 to 127.0.0.1:1812<br>
User-Name = 'prashant'<br>
NAS-IP-Address = 127.0.1.1<br>
NAS-Port = 0<br>
Message-Authenticator = 0x00<br>
MS-CHAP-Challenge = 0x42b125cb7f6408b4<br>
MS-CHAP-Response =
0x0001000000000000000000000000000000000000000000000000c82b9abb20333db96efcb1f93beb602b39ebbd007a8c0392<br>
Received Access-Accept Id 40 from 127.0.0.1:1812 to
127.0.0.1:54825 length 84<br>
MS-CHAP-MPPE-Keys = 0x<br>
MS-MPPE-Encryption-Policy = Encryption-Allowed<br>
MS-MPPE-Encryption-Types = RC4-40or128-bit-Allowed<br>
</tt><br>
But when I try to login from webpage I am getting following response<tt><br>
<br>
(0) mschap : Client is using MS-CHAPv2<br>
(0) mschap : Executing: /usr/bin/ntlm_auth --request-nt-key
--username=%{mschap:User-Name:-None}
--domain=%{%{mschap:NT-Domain}:-mycompany.local}
--challenge=%{mschap:Challenge:-00}
--nt-response=%{mschap:NT-Response:-00}<br>
(0) mschap : EXPAND --username=%{mschap:User-Name:-None}<br>
(0) mschap : --> --username=prashant<br>
(0)<b> ERROR: mschap : No NT-Domain was found in the User-Name</b><br>
(0) mschap : EXPAND
--domain=%{%{mschap:NT-Domain}:-mycompany.local}<br>
(0) mschap : --> --domain=mycompany.local<br>
(0) mschap : Creating challenge hash with username: prashant<br>
(0) mschap : EXPAND --challenge=%{mschap:Challenge:-00}<br>
(0) mschap : --> --challenge=e5d49180d36eb904<br>
(0) mschap : EXPAND --nt-response=%{mschap:NT-Response:-00}<br>
<b>(0) mschap : -->
--nt-response=0000000e0000000000000000000000000000000000000000</b><b><br>
</b><b>(0) ERROR: mschap : Program returned code (1) and output
'Logon failure (0xc000006d)'</b><br>
(0) mschap : External script failed.<br>
(0) ERROR: mschap : External script says: Logon failure
(0xc000006d)<br>
(0) ERROR: mschap : MS-CHAP2-Response is incorrect<br>
(0) [mschap] = reject<br>
(0) } # Auth-Type MS-CHAP = reject<br>
<br>
</tt>Can somebody help me to understand what exactly the issue. I am
using FreeRADIUS Version 3.0.3 and Samba version 3.6.3.<br>
<br>
Thanks & Regards,<br>
Prashant<br>
</body>
</html>