Hello, friends. Ubuntu 14.04, freeradius 2.1.12+dfsg-1.1ubuntu0.1 I'm trying to authenticate a user through Active Directory(ntlm_auth) with option --require-membership-of. When I run just from the console with the option --require-membership-of = 's-1-5-21-241991751-2423211274-3836920987-1626 - everything goes well. root@lf-mgr-02:/etc/freeradius# ntlm_auth --request-nt-key --domain=lenfi.ru --username=test2 --require-membership-of='s-1-5-21-241991751-2423211274-3836920987-1626' Password: NT_STATUS_OK: Success (0x0) When I add in mschap this option in debug I see: Could not parse s-1-5-21-241991751-2423211274-3836920987-1626 into separate domain/name parts! *** Error in `/usr/bin/ntlm_auth': free(): invalid pointer: 0x00007f13562b9e9c *** Exec-Program output: ?▒t?▒r▒▒▒<???▒▒▒▒1▒?▒▒I?|$?H?▒??j▒▒▒▒▒r (0xc000000d) Exec-Program-Wait: plaintext: ?▒t?▒r▒▒▒<???▒▒▒▒1▒?▒▒I?|$?H?▒??j▒▒▒▒▒r (0xc000000d) When I try add --require-membership-of=LENFI\\wirelessusers: Could not parse LENFILM\WirelessUsers into separate domain/name parts! *** Error in `/usr/bin/ntlm_auth': free(): invalid pointer: 0x00007f13562b9e9c *** Exec-Program output: ?▒t?▒r▒▒▒<???▒▒▒▒1▒?▒▒I?|$?H?▒??j▒▒▒▒▒r (0xc000000d) Exec-Program-Wait: plaintext: ?▒t?▒r▒▒▒<???▒▒▒▒1▒?▒▒I?|$?H?▒??j▒▒▒▒▒r (0xc000000d) Please tell me whether it is possible to add this option(--require-membership-of) in the config mschap to authenticate users of a AD group. Thank you! ---------------------------------------------------------------------- С уважением, Попов Александр pop5s@mail.ru