Alan,
You seem to be one of the most knowledgeable folks on the list.
Can you provide any input? All help is appreciated.
From:
freeradius-users-bounces@lists.freeradius.org
[mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of
Sent: Friday, December 02, 2005
12:51 PM
To:
Subject: RADIUS Auth-Type
OK, here is the situation. I have successfully configured
RADIUS to authenticate/authorize NAS requests from my Cisco gear so long as the
user “Auth-Type= System”. I have also managed to get Samba working
and have joined the radius server to the AD realm in question. This is
confirmed through the following:
ntlm_auth --request-nt-key --domain=MYDOMAIN
--username=MYUID
password:xxxxx
NT_STATUS_OK: Success (0x0)
wbinfo -a MYUID%MYPASSWD
plaintext password authentication failed
error code was NT_STATUS_NO_SUCH_USER (0xc0000064)
error messsage was: No such user
Could not authenticate user MYUID%MTPASSWD with
plaintext password
challenge/response password authentication succeeded
However, when I edit the /etc/raddb/users file and change
the “Auth-Type= System” to “Auth-Type=MSCAP” all
authentication attempts fail. Am I specifying the correct auth-type? Have I
missed a step? Is there something I can do (debug maybe) that will better
assist in identifying the problem? Any and all suggestions are appreciated.
I am attempting to have RADIUS proxy authentication
requests to AD, then assign attributes if authentication succeeds.