Re: Authenticating agains AD issues

On 28/10/10 16:22, Johnson, Neil M wrote:

Yes, I did.

Ah. However, the debug output says:

[mschap] expand: %{Stripped-User-Name} -> [mschap] ... expanding second conditional [mschap] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [mschap] expand: %{User-Name:-None} -> IOWA\nmjoo [mschap] expand: --username=%{%{Stripped-User-Name}:-%{User-Name:-None}} -> --username=IOWA\nmjoo

i.e. the username still contains a "DOMAIN\". You need to change the "ntlm_auth" command in /etc/raddb/modules/mschap to have: ntlm_auth = "... --username=%{mschap:User-Name} ..."