2 Mar
2011
2 Mar
'11
8:29 a.m.
So, in /etc/raddb/modules/mschap, set (don't include the line continuation \ I've added):
ntlm_auth = "/path/to/ntlm_auth --request-nt-key \ --username=%{mschap:User-Name} --domain=YOURDOMAIN \ --challenge=... --nt-response=..."
More good news (though expected): This change did not break authentication for users. Both users and computers in DOMAIN (whether specified as col.missouri.edu or UMC-USERS) can now authenticate. Still leaves the multi-domain problem, though. :( --J