Please post:
1) OS you're using to run RADIUS. 2) version of Active Directory 3) version of Samba
Then, try *downgrading* samba to an earlier version. Keep going backwards until it works. Then, post the version of Samba where it starts working.
I've asked the Samba people if they know anything more about this, but have seen no response. If this is common, I'll open a bug with them, and see if it can get larger attention.
Thanks for the help, yes I am using Samba between AD and Freeradius.
The OS I'm running on the Freeradius server is Ubuntu 8.10. I'm running a OpenSSL patched package of Freeradius 2.1.0+dfsg-0ubuntu2. The Active Directory server is Windows Server 2003. The version of Samba (and winbind) running is 3.2.3-1ubuntu3.4.
I will begin downgrading my Samba and see if that changes anything.
Samba was exactly the issue. I downgraded from the "ubuntu intrepid" version of Samba (3.2.3-1ubuntu3.4) to the "ubuntu hardy" version of Samba (3.0.28a-1ubuntu4.7) and my Windows XP clients started authenticating right away. Thanks guys, you saved me quite a bit of headache. Chris Studt