Note use of "%{mschap:User-Name}" and "%{mschap:NT-Domain}". Despite this, "host/computer.domain" login attempts always fail. Hence, trying to do the translation manually via a regex and update clauses.
And what happens when you try to run ntlm_auth on the command-line?
i.e. take the string printed by the server, and keep running it by hand. Play with the various parameters until it works. Then, configure the server to run it with those parameters.
Also, here is the 'mschap' section from a recent attempt. Note that the User-Name attribute is not changed to 'dnps-caplap-4$' nor is the NT-Domain attribute set to 'col.missouri.edu'. The User-Name attribute is being left unchanged and the NT-Domain attribute is set to 'col'. So something in mschap is broken? Perhaps is an old bug? This is version 2.1.7 (built a little over a year ago, Dec. 2009). --J