But "xjtu" is our default domain, I set it in mschap ntlm_auth parameters. If I use old freeRADIUS-1.1.6, mschap module will supply "xjtu" as domain if no domain info in username.
发件人: Alan Buxey <A.L.M.Buxey@lboro.ac.uk>
主题: Re: ntlm_auth fails for none domain
收件人: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org>
日期: 2010年7月2日,周五,下午4:17
Hi,
> Hi,
> It is the whole debug info. I think the problem is we could not get the default domain name "xjtu".
thats not the whole debug either...never mind.
[John] Sorry. I did not attach the debug for freeRADIUS init.
from what I can see.....
> Listening on authentication address * port 1812
> Listening on command file /usr/local/var/run/radiusd/radiusd.sock
> Listening on proxy address * port 1814
> Ready to process requests.
> rad_recv: Access-Request packet from host 10.155.20.85 port 32807, id=118, length=125
> Service-Type = Authorize-Only
> NAS-Port-Type = Wireless-802.11
> User-Name = "hhe"
^^^^^^^^^^^^^^^^^^^
you are not sending any doamin in the login at all - so how the ***** can FR know to do things for you?
the domain needs to be sent in the login
> [mschap] expand: --domain=%{mschap:NT-Domain:-xjtu} -> --domain=
see, you say, use the value supplied via mschap, or use xjtu. mschap supplied a blank, so you
use a blank.
[John] Yes. I did not supply the domain into in the usename.
But "xjtu" is our default domain, I set it in mschap ntlm_auth parameters.
If I use old freeRADIUS-1.1.6, mschap module will supply "xjtu" as domain if no domain info in username.