RE: rlm_eap: Identity does not match User-Name...
if anybody has the same problem, here's the solution.. i've installed 2.0.0-pre2 and made just the following changes to radiusd.conf: mschap { with_ntdomain_hack = yes ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --username=%{mschap:User-Name} --challenge=%{mschap:Challenge} --nt-response=%{mschap:NT-Response} --domain=%{mschap:NT-Domain}" } after that averything works fine, so i started to add my perl-module to every section. after that it fails with the same error as pre1. so i remove "perl" from the authorize section - where it wasn't realy required, and now everything works fine. i think this will also works with pre1, but now i'll stay on pre2 :-) for 2.0.0 final: the sample "ntlm_auth"-line in radiusd.conf won't work! thx for help, Alan. regards, michael
Hi,
if anybody has the same problem, here's the solution..
i've installed 2.0.0-pre2 and made just the following changes to radiusd.conf:
mschap { with_ntdomain_hack = yes ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --username=%{mschap:User-Name} --challenge=%{mschap:Challenge} --nt-response=%{mschap:NT-Response} --domain=%{mschap:NT-Domain}" }
after that averything works fine, so i started to add my perl-module to every section. after that it fails with the same error as pre1.
so i remove "perl" from the authorize section - where it wasn't realy required, and now everything works fine. i think this will also works with pre1, but now i'll stay on pre2 :-)
for 2.0.0 final: the sample "ntlm_auth"-line in radiusd.conf won't work!
this works here: ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --username=%{Stripped-User-Name:-%{mschap:User-Name:-%{User-Name:-None}}} --domain=%{mschap:NT-domain} --challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}" I think the main issue is that you REALLY need to have at least the mschap:User-Name - the default entry doesnt have it (?) - with either other options and defaults - but just User-Name doesnt work. it must be mschap:User-Name alan
participants (2)
-
A.L.M.Buxey@lboro.ac.uk -
Michael Patzer