Re: PAP with LDAP and PEAP/MSCHANPv2 with ntlm_auth

Neil Prockter wrote:

this is a config that works for PAP/LDAP but not PEAP/MSCHANPv2

Change the version of Samba. From eap.conf: # If is still doesn't work, and you're using Samba, # you may be encountering a Samba bug. See: # # https://bugzilla.samba.org/show_bug.cgi?id=6563 # # Note that we do not necessarily agree with their # explanation... but the fix does appear to work. # Note that this problem *never* appears if the Cleartext-Password is available to FreeRADIUS. It *only* happens when Samba is being used. Try this for yourself. Configure a Cleartext-Password in the "users" file for a test user, and disable ntlm_auth. If PEAP/MSCHAPv2 works, then the problem is Samba, not FreeRADIUS. Alan DeKok.