-----------snip---------------
modules
{
...
exec win_domain {
wait =
yes
input_pairs =
request
output_pairs =
reply
program = "ntlm_auth
--username=\"%{User-Name}\" --password=\'%{User-Password}\'
--domain=mydomain"
}
...
}
Now list "win_domain" in the
"authenticate" section, and add the
following entry to the "users"
file:
DEFAULT Auth-Type = win_domain
-----------snip---------------
When I start ntlm_auth on command
line:
server:/#
/usr/bin/ntlm_auth --username='_web' --password='XXXXX!'
--domain=mydomain
NT_STATUS_OK: Success (0x0)
All is ok.
:)
Trying the same with
radtest:
ldaptest02:/etc/raddb# radtest "_web" 'XXXXX!' localhost 10
testing123
Sending
Access-Request of id 75 to
127.0.0.1:1812
User-Name =
"_web"
User-Password =
"XXXXX!"
NAS-IP-Address =
ldaptest
NAS-Port =
10
rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=75,
length=20
Nothing is ok
:-(
Logfiles:
-----------snip---------------
Nov
8 13:58:57 ldaptest radiusd: modcall: group authorize returns ok for request
8
Nov 8 13:58:57 ldaptest radiusd:
rad_check_password: Found Auth-Type win_domain
Nov 8 13:58:57
ldaptest radiusd: auth: type "win_domain"
Nov 8 13:58:57 ldaptest
radiusd: Processing the authenticate section of
radiusd.conf
Nov 8 13:58:57 ldaptest radiusd: modcall: entering group
Auth-Type for request 8
Nov 8 13:58:57 ldaptest radiusd:
radius_xlat: '/usr/bin/ntlm_auth --username='_web' --password='XXXXX!'
--domain=central'
Nov 8 13:58:57 ldaptest radiusd: Exec-Program:
/usr/bin/ntlm_auth --username='_webman' --password='XXXXX!'
--domain=central
Nov 8 13:58:57
ldaptest radiusd: Exec-Program output: NT_STATUS_NO_SUCH_USER: No such user
(0xc0000064)
Nov 8 13:58:57 ldaptest radiusd: Exec-Program-Wait:
plaintext: NT_STATUS_NO_SUCH_USER: No such user (0xc0000064)
Nov 8
13:58:57 ldaptest radiusd: Exec-Program: returned: 1
Nov 8 13:58:57
ldaptest radiusd: rlm_exec (win_domain): External script failed
Nov 8
13:58:57 ldaptest radiusd: modcall[authenticate]: module
"win_domain" returns fail for request 8
-----------snip---------------
The line in the log is the same as I enter
it at command line. Why is the answer different?
Thanks for your help and/ or ideas for
problem solution!
Greets from Germany
Christian