Hi,
I see one difference between my machine auth and user auth cases:
yep
(18) mschap : EXPAND --username=%{%{Stripped-User-Name}:-%{%{User-Name}:-None}} (18) mschap : --> --username=dxu (18) ERROR: mschap : No NT-Domain was found in the User-Name (18) mschap : EXPAND --domain=%{%{mschap:NT-Domain}:-CFS.UOGUELPH.CA} (18) mschap : --> --domain=CFS.UOGUELPH.CA
no NT-Domain found so its using your provided value in the config
(19) mschap : EXPAND --username=%{%{mschap:User-Name}:-00} (19) mschap : --> --username=CCS-252$ (19) mschap : EXPAND --username=%{%{Stripped-User-Name}:-%{%{User-Name}:-None}} (19) mschap : --> --username=host/CCS-252.cfs.uoguelph.ca (19) mschap : EXPAND --domain=%{%{mschap:NT-Domain}:-CFS.UOGUELPH.CA} (19) mschap : --> --domain=cfs
NT-domain provided by client....so its using that....and not your provided realm. so, if you want it to work, ignore the NT-domain provided by the client (here, we dont have the -domain=%{%{mschap:NT-Domain}.... part at all in the ntlm_auth line... it all hits the configured realm in samba that ntlm_auth/winbind uses alan