Hi!

I tried to use aythentication via Active Directory domain.
FreeRadius 2.1.6 return error:

[mschap] No Cleartext-Password configured.  Cannot create LM-Password.
[mschap] No Cleartext-Password configured.  Cannot create NT-Password.
[mschap] Told to do MS-CHAPv2 for BAS with NT-Password
[mschap] WARNING: Deprecated conditional expansion ":-".  See "man unlang" for details
[mschap] WARNING: Deprecated conditional expansion ":-".  See "man unlang" for details
[mschap]     expand: --username=%{Stripped-User-Name:-%{User-Name:-None}} -> --username=BAS
[mschap]  mschap2: bb
[mschap]     expand: --challenge=%{mschap:Challenge:-00} -> --challenge=256c4a167da6dfb6
[mschap]     expand: --nt-response=%{mschap:NT-Response:-00} -> --nt-response=d57ebadb8c21cc5b95dfc9022b621678897e529734e979ba
Exec-Program output:
Exec-Program: Abnormal child exit: Invalid argument
[mschap] External script failed.
[mschap] FAILED: MS-CHAP2-Response is incorrect
++[mschap] returns reject
Failed to authenticate the user.

If I call ntlm_auth from shell I get right answer.

It was tested with samba-3.0.35 and samba 3.3.4.

My radiusd.conf, modules/mschap and dump of radiusd output in attachments.

Thanks,
Anton.