Try running the server in Debug mode /path/to/freeradius -X -A from the command line, and ask that user to login. It might give more info than just "External Script Failed"
-----Original Message----- From: freeradius-users-bounces+mking=bridgew.edu@lists.freeradius.or g [mailto:freeradius-users-bounces+mking=bridgew.edu@lists.freer adius.org] On Behalf Of Jérémy Cluzel Sent: Saturday, March 25, 2006 8:41 AM To: freeradius-users@lists.freeradius.org Subject: PEAP ntlm_auth strange behaviour
Hello,
I used a FR 1.1.0 under FreeBSD 6.0 I configure it to PEAP auth against a windows 2003 AD through ntlm_auth (samba 3.0.21b). Everything works fine, user auth, machine auth...
The problem is that for some obscur reasons, some users ("jpbrunain" in this case) are unable to log in. As I saw in the radius.log, I got "rlm_mschap: External script failed.". Moreover, if I run "ntlm_auth --request-nt-key --domain=CHRT --username=jpbrunain" with the good password, I got this message: "NT_STATUS_OK: Success (0x0)"... This problem concerns only 2 users out of 20... and I don't see anything "special" concerning them on the 2003 AD...
Does anyone have the problem ? Is there a way to solve it ?
Regards,
Jeremy