Hi Seth, we authenticate WinXPsp3 supplicants via PEAP/MS-Chapv2 with FreeRADIUS against Win2k3 AD. We are using FreeRADIUS 2.1.6 and samba 3.2.7. This works fine for user authentication and for host authentication too. I suggest a test with these versions to eliminate possible configuration issues ... good luck Axel Seth schrieb:
Alan,
We are currently using Samba 3.0.34... Do you know if there are release notes or a discussion regarding this issue you can point me to, I didnt see anything from a search.
Thanks,
/Seth
On Thu, Jan 14, 2010 at 9:29 AM, Alan DeKok <aland@deployingradius.com>wrote:
Seth wrote:
I have a strange problem where the initial 802.1X authentication is successful, but then fails subsequent auth attempts. This is using Windows XP sp3 PEAP/MS-Chapv2, FreeRADIUS 2.1.3, with Active Directory running on a Windows2003 server.
I noticed the following discrepency in the RADIUS logs. The two auth attempts are identical until this part: You are using ntlm_auth for authentication. This issue appears to be a bug in Samba. Downgrade Samba until you find a version that works.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Axel Vogel Network/Operations | Bundesamt fuer Kartographie und Geodaesie | Tel.: +49 341 5634 203 Aussenstelle Leipzig | Fax: +49 341 5634 1984 Karl-Rothe-Str. 10-14 | D-04105 Leipzig | 012deg 22' 26.75" E Federal Republic of Germany | 51deg 21' 14.50" N