Yes, I reverted authenticate part to

Auth-Type PAP {
    pap
}


On Fri, Jun 26, 2009 at 11:26, Ivan Kalik <tnt@kalik.net> wrote:
> Sorry, I just c/p that line from other link
>
> here is mine
>
> exec ntlm_auth_pap {
>         wait = yes
>         input_pairs = request
>         shell_excape = yes
>         output = none
>         program = "/usr/bin/ntlm_auth --request-nt-key --domain=EXCHANGE
> --username=%{mschap:User-Name} --password=%{User-Password}"
>     }
>
> should domain field be pre-windows 2000/NT name or fqdn? (domain.com)
>
> Also, I didn't get you quite well, I am new to both linux and freeradius,
> should I set following
>
> Auth-Type PAP
>   {
>   ntlm_auth_pap
>   }
>
> in authenticate section of /etc/freeradius/sites-enabled/inner-tunnel and
> /etc/freeradius/sites-available/inner-tunnel files?

No, authenticate should look like:

Auth-Type PAP {
    pap
}

ntlm_auth_pap

...

Ivan Kalik
Kalik Informatika ISP

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html