I've tried to find something on the past posts on this list about this. I think I found what the problem is but was unable to find a solution. I'm trying to make it so I can authenticate machines using the computer name. I know I need to set the ntlm_auth command correctly but I couldn't find to what or is there another solution? Here's my output: [mschap] No Cleartext-Password configured. Cannot create LM-Password. [mschap] No Cleartext-Password configured. Cannot create NT-Password. [mschap] Told to do MS-CHAPv2 for host/billlgateway.ads.wsc.ma.edu with NT-Password [mschap] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [mschap] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [mschap] expand: --username=%{Stripped-User-Name:-%{User-Name:-None}} -> --username=host/billlgateway.ads.wsc.ma.edu [mschap] mschap2: 72 [mschap] expand: --challenge=%{mschap:Challenge:-00} -> --challenge=c0b3cf2bed56caa9 [mschap] expand: --nt-response=%{mschap:NT-Response:-00} -> --nt-response=ef761f39a5775d58921cf42503c587f05060638411cf8555 Exec-Program output: Logon failure (0xc000006d) Exec-Program-Wait: plaintext: Logon failure (0xc000006d) Exec-Program: returned: 1 [mschap] External script failed. [mschap] FAILED: MS-CHAP2-Response is incorrect ++[mschap] returns reject Thomas E. Casartello, Jr. Wireless Network Technician Linux Specialist Information Technology Westfield State College Westfield, MA 01086 (413) 572-8245
Did you try what is suggested in mschap module just above the ntlm_auth line? Ivan Kalik Kalik Informatika ISP Dana 17/10/2008, "Casartello, Thomas" <tcasartello@wsc.ma.edu> piše:
I've tried to find something on the past posts on this list about this. I think I found what the problem is but was unable to find a solution. I'm trying to make it so I can authenticate machines using the computer name. I know I need to set the ntlm_auth command correctly but I couldn't find to what or is there another solution? Here's my output: [mschap] No Cleartext-Password configured. Cannot create LM-Password. [mschap] No Cleartext-Password configured. Cannot create NT-Password. [mschap] Told to do MS-CHAPv2 for host/billlgateway.ads.wsc.ma.edu with NT-Password [mschap] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [mschap] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [mschap] expand: --username=%{Stripped-User-Name:-%{User-Name:-None}} -> --username=host/billlgateway.ads.wsc.ma.edu [mschap] mschap2: 72 [mschap] expand: --challenge=%{mschap:Challenge:-00} -> --challenge=c0b3cf2bed56caa9 [mschap] expand: --nt-response=%{mschap:NT-Response:-00} -> --nt-response=ef761f39a5775d58921cf42503c587f05060638411cf8555 Exec-Program output: Logon failure (0xc000006d) Exec-Program-Wait: plaintext: Logon failure (0xc000006d) Exec-Program: returned: 1 [mschap] External script failed. [mschap] FAILED: MS-CHAP2-Response is incorrect ++[mschap] returns reject
Thomas E. Casartello, Jr. Wireless Network Technician Linux Specialist Information Technology Westfield State College Westfield, MA 01086 (413) 572-8245
About changing it to User-Name? -----Original Message----- From: freeradius-users-bounces+tcasartello=wsc.ma.edu@lists.freeradius.org [mailto:freeradius-users-bounces+tcasartello=wsc.ma.edu@lists.freeradius.org] On Behalf Of tnt@kalik.net Sent: Friday, October 17, 2008 9:37 AM To: FreeRadius users mailing list Subject: Re: Machine Authentication Did you try what is suggested in mschap module just above the ntlm_auth line? Ivan Kalik Kalik Informatika ISP Dana 17/10/2008, "Casartello, Thomas" <tcasartello@wsc.ma.edu> piše:
I've tried to find something on the past posts on this list about this. I think I found what the problem is but was unable to find a solution. I'm trying to make it so I can authenticate machines using the computer name. I know I need to set the ntlm_auth command correctly but I couldn't find to what or is there another solution? Here's my output: [mschap] No Cleartext-Password configured. Cannot create LM-Password. [mschap] No Cleartext-Password configured. Cannot create NT-Password. [mschap] Told to do MS-CHAPv2 for host/billlgateway.ads.wsc.ma.edu with NT-Password [mschap] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [mschap] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [mschap] expand: --username=%{Stripped-User-Name:-%{User-Name:-None}} -> --username=host/billlgateway.ads.wsc.ma.edu [mschap] mschap2: 72 [mschap] expand: --challenge=%{mschap:Challenge:-00} -> --challenge=c0b3cf2bed56caa9 [mschap] expand: --nt-response=%{mschap:NT-Response:-00} -> --nt-response=ef761f39a5775d58921cf42503c587f05060638411cf8555 Exec-Program output: Logon failure (0xc000006d) Exec-Program-Wait: plaintext: Logon failure (0xc000006d) Exec-Program: returned: 1 [mschap] External script failed. [mschap] FAILED: MS-CHAP2-Response is incorrect ++[mschap] returns reject
Thomas E. Casartello, Jr. Wireless Network Technician Linux Specialist Information Technology Westfield State College Westfield, MA 01086 (413) 572-8245
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Figured it out by looking at an old radius.conf....had to change user-name to mschap-user-name -----Original Message----- From: freeradius-users-bounces+tcasartello=wsc.ma.edu@lists.freeradius.org [mailto:freeradius-users-bounces+tcasartello=wsc.ma.edu@lists.freeradius.org] On Behalf Of Casartello, Thomas Sent: Friday, October 17, 2008 9:42 AM To: 'FreeRadius users mailing list' Subject: RE: Machine Authentication About changing it to User-Name? -----Original Message----- From: freeradius-users-bounces+tcasartello=wsc.ma.edu@lists.freeradius.org [mailto:freeradius-users-bounces+tcasartello=wsc.ma.edu@lists.freeradius.org] On Behalf Of tnt@kalik.net Sent: Friday, October 17, 2008 9:37 AM To: FreeRadius users mailing list Subject: Re: Machine Authentication Did you try what is suggested in mschap module just above the ntlm_auth line? Ivan Kalik Kalik Informatika ISP Dana 17/10/2008, "Casartello, Thomas" <tcasartello@wsc.ma.edu> piše:
I've tried to find something on the past posts on this list about this. I think I found what the problem is but was unable to find a solution. I'm trying to make it so I can authenticate machines using the computer name. I know I need to set the ntlm_auth command correctly but I couldn't find to what or is there another solution? Here's my output: [mschap] No Cleartext-Password configured. Cannot create LM-Password. [mschap] No Cleartext-Password configured. Cannot create NT-Password. [mschap] Told to do MS-CHAPv2 for host/billlgateway.ads.wsc.ma.edu with NT-Password [mschap] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [mschap] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [mschap] expand: --username=%{Stripped-User-Name:-%{User-Name:-None}} -> --username=host/billlgateway.ads.wsc.ma.edu [mschap] mschap2: 72 [mschap] expand: --challenge=%{mschap:Challenge:-00} -> --challenge=c0b3cf2bed56caa9 [mschap] expand: --nt-response=%{mschap:NT-Response:-00} -> --nt-response=ef761f39a5775d58921cf42503c587f05060638411cf8555 Exec-Program output: Logon failure (0xc000006d) Exec-Program-Wait: plaintext: Logon failure (0xc000006d) Exec-Program: returned: 1 [mschap] External script failed. [mschap] FAILED: MS-CHAP2-Response is incorrect ++[mschap] returns reject
Thomas E. Casartello, Jr. Wireless Network Technician Linux Specialist Information Technology Westfield State College Westfield, MA 01086 (413) 572-8245
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi, the username needs to have a $ - use unlang, for example to stiick a $ into stripped user name and use stripped user name for authentication alan
Quoting A.L.M.Buxey@lboro.ac.uk:
Hi,
the username needs to have a $ - use unlang, for example to stiick a $ into stripped user name and use stripped user name for authentication
Hello can you please give an example how to use unlang to stiick a $ to the username thank you luis
Hi,
can you please give an example how to use unlang to stiick a $ to the username
amusing. you even copied my typo/sticky key issue. I could spoonfeed you a recipe - but you'll blindly put it into your config without understanding it, what it does or why it might even open up huge security hole in your server......wouldnt you? :-| alan
can you please give an example how to use unlang to stiick a $ to the username
amusing. you even copied my typo/sticky key issue.
I could spoonfeed you a recipe - but you'll blindly put it into your config without understanding it, what it does or why it might even open up huge security hole in your server......wouldnt you? :-|
Nice if i can amuse you .... In german we say (Abwandlung eines bekannten Sprichworts) "ein Beispiel sagt mehr als tausend Wörter" Maybe sombody else could give me a link to some examples for "unlang" by luis
Statement that appends stuff is the same in hints, users file, unlang ... Ivan Kalik Kalik Informatika ISP Dana 20/10/2008, "alois blasbichler" <alois.blasbichler@sb-brixen.it> piše:
can you please give an example how to use unlang to stiick a $ to the username
amusing. you even copied my typo/sticky key issue.
I could spoonfeed you a recipe - but you'll blindly put it into your config without understanding it, what it does or why it might even open up huge security hole in your server......wouldnt you? :-|
Nice if i can amuse you .... In german we say (Abwandlung eines bekannten Sprichworts) "ein Beispiel sagt mehr als tausend Wörter"
Maybe sombody else could give me a link to some examples for "unlang"
by luis
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
Nice if i can amuse you .... In german we say (Abwandlung eines bekannten Sprichworts) "ein Beispiel sagt mehr als tausend Wörter"
sure. and another well-known proverb is 'give a man a fish and he can eat for a day, teach a man to fish and he can eat for ever' ie i can give you 3 lines of unlang, or I can tell you to use unlang or a reg-rewrite and you can look at the unlang and rewrite examples and work out how and why it works ..but you want good technical guide? try this sort of stuff www.ja.net/documents/publications/technical-guides/8021x-tg-web.pdf page 25 uses unlang to set an updated attribute. you'd want to modify the call and routine just to check for \blahblah and then set the end of string to have a $ likewise, official novell docs for dealing with this kind of stuff http://www.novell.com/coolsolutions/feature/17044.html tells you how to add a $ for a host auth alan
There are plenty of examples in the documentation on how to append a realm (@whatever) to the username. Modify it to add $. Ivan Kalik Kalik Informatika ISP Dana 20/10/2008, "alois blasbichler" <alois.blasbichler@sb-brixen.it> piše:
Quoting A.L.M.Buxey@lboro.ac.uk:
Hi,
the username needs to have a $ - use unlang, for example to stiick a $ into stripped user name and use stripped user name for authentication
Hello
can you please give an example how to use unlang to stiick a $ to the username
thank you luis
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
A.L.M.Buxey＠lboro.ac.uk -
alois blasbichler -
Casartello, Thomas -
tnt＠kalik.net