Hi,
I have been unable to get a PEAP user to work, but I was able to get a TLS User to work.
It keeps on failing for MSCHAP. I tried to change the mschap module settings but this made no difference.
I am currently using samba 3.5 with active directory. Does my ntlm_auth path look correct?
Thanks for every ones help,
Scott
ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --username=%{%{Stripped-User-Name}:-%{User-Name:-None}} --challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}"
#ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --username=%{mschap:User-Name:-None} --domain=%{%mschap:NT-domain}:-SQA.net} --challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}"
}
On Mon, May 14, 2012 at 1:55 PM, James J J Hooper [via FreeRadius]
<[hidden email]> wrote:
On 11/05/2012 13:35, Phil Mayers wrote:
> On 11/05/12 13:10, sgilmour wrote:
>
>> --nt-response=46eb0f981a6121ad65e5726b0ee0e2097d610172204c7f24
>> Fri May 11 08:08:13 2012 : Debug: Exec-Program output: Access denied
>> (0xc0000022)
>> Fri May 11 08:08:13 2012 : Debug: Exec-Program-Wait: plaintext: Access
>> denied (0xc0000022)
>> Fri May 11 08:08:13 2012 : Debug: Exec-Program: returned: 1
>> Fri May 11 08:08:13 2012 : Info: [mschap] External script failed.
>> Fri May 11 08:08:13 2012 : Info: [mschap] FAILED: MS-CHAP2-Response is
>> incorrect
>
>
> The "ntlm_auth" helper is returning errors. Try the command from the CLI
> and examine the output. Check the permissions on the winbind socket
> (google for details) and SELinux contexts, if applicable.
ntlm_auth/winbind is talking to can not contact the PDC. If you are
continuing to have issues, and have completed Phil's suggestions, check
the logs on your domain controllers for anomalies.
-James
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
View this message in context: Re: MSCHAP Errors
Sent from the FreeRadius - User mailing list archive at Nabble.com.