On Fri, Sep 16, 2016 at 10:37:13AM -0400, Dave Aldwinckle wrote:
Off-topic, but related: This particular bit "&Module-Failure-Message := &request:Module-Failure-Message" is populated with the first ERROR that the mschap module spits out, which for us is always "No NT-Domain was found in the User-Name." Since none of our User-Names have NT domains in them, the message is confusing. Is there any way to include the other errors? "Program returned code (1) and output 'Logon failure (0xc000006d)" would be a good one:
(72) mschap: Creating challenge hash with username: nstestnexus@uwaterloo.ca (72) mschap: Client is using MS-CHAPv2 (72) mschap: Executing: /usr/bin/ntlm_auth --request-nt-key --username=%{%{Stripped-User-Name}:-%{%{User-Name}:-None}} --domain=%{%{mschap:NT-Domain}:-NEXUS}
Set this to "--domain=NEXUS" instead? It's the expansion of the mschap:NT-Domain that's causing the error. You should be able to get the other errors by looking at &Module-Failure-Message[1], &Module-Failure-Message[2], etc, I think? Matthew -- Matthew Newton, Ph.D. <mcn4@leicester.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>