Hi! I tried to use aythentication via Active Directory domain. FreeRadius 2.1.6 return error: [mschap] No Cleartext-Password configured. Cannot create LM-Password. [mschap] No Cleartext-Password configured. Cannot create NT-Password. [mschap] Told to do MS-CHAPv2 for BAS with NT-Password [mschap] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [mschap] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [mschap] expand: --username=%{Stripped-User-Name:-%{User-Name:-None}} -> --username=BAS [mschap] mschap2: bb [mschap] expand: --challenge=%{mschap:Challenge:-00} -> --challenge=256c4a167da6dfb6 [mschap] expand: --nt-response=%{mschap:NT-Response:-00} -> --nt-response=d57ebadb8c21cc5b95dfc9022b621678897e529734e979ba Exec-Program output: Exec-Program: Abnormal child exit: Invalid argument [mschap] External script failed. [mschap] FAILED: MS-CHAP2-Response is incorrect ++[mschap] returns reject Failed to authenticate the user. If I call ntlm_auth from shell I get right answer. It was tested with samba-3.0.35 and samba 3.3.4. My radiusd.conf, modules/mschap and dump of radiusd output in attachments. Thanks, Anton.