It finally works.  Looks the format changed.  
 
--domain=%{mschap:NT-Domain:-xjtu}      ==> works in freeradius-1.1.x, 2.1.x not works
--domain=%{%{mschap:NT-Domain}:-xjtu}   ==> works in freeradius-2.1.x, 1.1.x not works


--- 10年7月8日,周四, John <elmer_radius@yahoo.com.cn> 写道:

发件人: John <elmer_radius@yahoo.com.cn>
主题: Re: ntlm_auth fails for none domain
收件人: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org>
日期: 2010年7月8日,周四,下午2:10

 
Sorry. I did not set the 'xjtu' in the first time. But I set 'xjtu' after that. Pls see the second mail I wrote.
 
I put ntlm_auth line to file 'mschap'. The attached file is my 'mschap' and the related debug info.


--- 10年7月5日,周一, Alan Buxey <A.L.M.Buxey@lboro.ac.uk> 写道:

发件人: Alan Buxey <A.L.M.Buxey@lboro.ac.uk>
主题: Re: ntlm_auth fails for none domain
收件人: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org>
日期: 2010年7月5日,周一,下午4:53

Hi,

no...you havent added it. look, heres the debug you supplied

> It is the related part in configuration file:
> ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --domain=%{mschap:NT-Domain:-xjtu} --username=%{mschap:User-Name} --challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}"
>
>
> It is debug info:
> [mschap] Told to do MS-CHAPv2 for hhe with NT-Password
> [mschap] No NT-Domain was found in the User-Name.
> [mschap]  expand: --domain=%{mschap:NT-Domain} -> --domain=
                    ^^^^^^^^^^^^^^^^^^^^^^^^^^^

where is xjtu mentioned there?  is isnt.

WHERE did you put the ntlm_auth line? 

alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html