I wasn't using the mschap module for ntlm_auth yet as I wanted to use radtest and ntlm_auth wasn't being called at all from the exec modules. I fixed that now. I hard coded the incorrect password but correct username but the auth failed still. Instead I reverted back to the old configuration files, changed the Default Auth-Type in the users file to "echo" and changed the "echo" program call and it works. Humph! tnt wrote:
I am trying to get exec ntlm_auth to work so I can use ms-chap
authentication
Something wrong with ntlm_auth call from the mschap {} module?
but I am having a problem. Trying to use the radtest tool I sent a valid username but an incorrect password but yet FreeRadius still sends back an access-accept. Why?
You hardcoded the correct password in ntlm_auth call. Since you hardcoded the real username as well, you can use a wrong username and it will still pass.
program = "/usr/bin/ntlm_auth ntlm_auth --request-nt-key --username=9430 --password=aaa"
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- View this message in context: http://www.nabble.com/exec-ntlm_auth-doesn%27t-fail-tf4896518.html#a14027901 Sent from the FreeRadius - User mailing list archive at Nabble.com.