<snip lots of stuff about socket permissions, then...>
Sending Access-Accept of id 225 to 10.4.1.2 port 2452 Reply-Message := "Authorized Users Only" MS-CHAP2-Success = 0x01533d33333944463630393339414534313746383533333841434436324439374137343844413541313936 MS-MPPE-Recv-Key = 0xd81d386eb6bd95dcd85badccd21036b4 MS-MPPE-Send-Key = 0x1415b0a4e0f2d9063a9b0d0e92e2869b MS-MPPE-Encryption-Policy = 0x00000001 MS-MPPE-Encryption-Types = 0x00000006
Ok, so it sent an Access-Accept. FreeRadius ran ntlm_auth, and ntlm_auth succeeded. That is: it did succeed. What's the problem?
Any ideas?
Here are the complete details of our config:
None of that info is required, or useful. I don't see a Samba version anywhere in that (massive) blob of info, but possibly you're running into: https://bugzilla.samba.org/show_bug.cgi?id=6563