Hello, friends.
Ubuntu 14.04, freeradius 2.1.12+dfsg-1.1ubuntu0.1
I'm trying to authenticate a user through Active Directory(ntlm_auth) with option --require-membership-of.
When I run just from the console with the option --require-membership-of = 's-1-5-21-241991751-2423211274-3836920987-1626 - everything goes well.

root@lf-mgr-02:/etc/freeradius# ntlm_auth --request-nt-key --domain=lenfi.ru --username=test2 --require-membership-of='s-1-5-21-241991751-2423211274-3836920987-1626'
Password:
NT_STATUS_OK: Success (0x0)

When I add in mschap this option in debug I see:

Could not parse s-1-5-21-241991751-2423211274-3836920987-1626 into separate domain/name parts!
*** Error in `/usr/bin/ntlm_auth': free(): invalid pointer: 0x00007f13562b9e9c ***
Exec-Program output: ?▒t?▒r▒▒▒<???▒▒▒▒1▒?▒▒I?|$?H?▒??j▒▒▒▒▒r (0xc000000d)
Exec-Program-Wait: plaintext: ?▒t?▒r▒▒▒<???▒▒▒▒1▒?▒▒I?|$?H?▒??j▒▒▒▒▒r (0xc000000d)

When I try add --require-membership-of=LENFI\\wirelessusers:

Could not parse LENFILM\WirelessUsers into separate domain/name parts!
*** Error in `/usr/bin/ntlm_auth': free(): invalid pointer: 0x00007f13562b9e9c ***
Exec-Program output: ?▒t?▒r▒▒▒<???▒▒▒▒1▒?▒▒I?|$?H?▒??j▒▒▒▒▒r (0xc000000d)
Exec-Program-Wait: plaintext: ?▒t?▒r▒▒▒<???▒▒▒▒1▒?▒▒I?|$?H?▒??j▒▒▒▒▒r (0xc000000d)

Please tell me whether it is possible to add this option(--require-membership-of) in the config mschap to authenticate users of a AD group.
Thank you!








С уважением,
Попов Александр
pop5s@mail.ru