On Jul 3, 2018, at 11:49 AM, Benjamin DUPALUT <benjamin.dupalut@esiee.fr> wrote:,
First of all, sorry for my english if there is some mistakes.
It's fine.
I'm trying to set up an authentication between a freeradius 3.0 server and a Samba 4 AD using ntlm_auth.
I apply the configuration from deployingradius.com/documents/configuration/active_directory.html
See the section titles "Configuring FreeRADIUS to use ntlm_auth"
but i got an error when testing with the "radtest -t mschap user passwd 127.0.0.1 0 testing123" command.
Here is the issue of the freeradius -X debug :
(11) mschap: WARNING: No Cleartext-Password configured. Cannot create NT-Password (11) mschap: WARNING: No Cleartext-Password configured. Cannot create LM-Password
(11) mschap: Client is using MS-CHAPv1 with NT-Password (11) mschap: ERROR: FAILED: No NT/LM-Password. Cannot perform authentication (11) mschap: ERROR: MS-CHAP2-Response is incorrect
It's still trying to use Cleartext-Password. You need to configure it to use ntlm_auth. Alan DeKok.