CD DD wrote:
i changed the source src/modules/rlm_mschap/rlm_mschap.c, recompiled and re-installed it.
But it still not working. Why the passchange part will not handled ? ... (8) mschap : expand: --nt-response=%{%{mschap:NT-Response}:-00} -> --nt-response=e3426708aea6af13c9ba6ca1af31212f460cd1a834482660 Exec-Program output: Must change password (0xc0000224) Exec-Program-Wait: plaintext: Must change password (0xc0000224) Exec-Program: returned: 1 (8) mschap : ntlm_auth says password must change (8) [mschap] = reject rlm_eap_mschapv2: No MS-CHAPv2-Success or MS-CHAP-Error was found.
That's the problem. Find out why the rlm_mschap module is *not* setting MS-CHAP-Error. From reading the code, it should be doing that. Unfortunately, figuring that out will take C debugging skills. Alan DeKok.