The permission for /var/run/samba/winbindd_privileged directorydrwxr-x--- 2 root winbindd_priv 40 Nov 15 12:56 winbindd_privileged/ Added the freerad user to the group usermod -a -G winbindd_priv freerad Run the test with no success. root@unifi-ubnt:/var/run/samba# radtest -t mschap shyju password 127.0.0.1 0 testing123Sending Access-Request of id 191 to 127.0.0.1 port 1812 User-Name = "shyju" NAS-IP-Address = 127.0.1.1 NAS-Port = 0 Message-Authenticator = 0x00000000000000000000000000000000 MS-CHAP-Challenge = 0x71dd9a1c10b9bc4b MS-CHAP-Response = 0x00010000000000000000000000000000000000000000000000007e6ad0937ad4b3dfbe0f98ff7e6ccdd11d8f68a6579583f0rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=191, length=38 MS-CHAP-Error = "\000E=691 R=1" _______ Regards, Shyju
Date: Sat, 15 Nov 2014 09:41:43 -0500 From: aland@deployingradius.com To: freeradius-users@lists.freeradius.org Subject: Re: Freeradius Active Directory Authentication using ntlm_auth
Shyju Kanaprath wrote: ...
Exec-Program output: Reading winbind reply failed! (0xc0000001) Exec-Program-Wait: plaintext: Reading winbind reply failed! (0xc0000001)
The radius server probably doesn't have permission to run ntlm_auth.
Run the ntlm_auth test as user radiusd (or whatever you set it to on your system). Then, fix permissions until it works.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html