Re : Re : Authorization?? pb Authentication against AD
the result of ntlm_auth in command line: -------------------------------------------------------------- aaa:/var/lib/samba #ntlm_auth --username glouglou --domain pluton password: NT_STATUS_OK: Success (0x0) aaa:/var/lib/samba # -------------------------------------------------------------- username is glouglou, password is glouglou!! and it works with ntlm_auth! any idea?? thank you ----
i think the point error in the log is (see below), and i wonder (if i understood well) how to fix that :
rlm_mschap: No Cleartext-Password configured. Cannot create LM-Password. rlm_mschap: No Cleartext-Password configured. Cannot create NT-Password.
No, ntlm_auth is doing authentication.
Exec-Program output: Logon failure (0xc000006d)
And it fails. Password is wrong. Get ntlm_auth working from the command line first. You might need to use mschap:User-Name for username to expand without the domain. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _____________________________________________________________________________ Envoyez avec Yahoo! Mail. Une boite mail plus intelligente http://mail.yahoo.fr
Hi,
the result of ntlm_auth in command line:
-------------------------------------------------------------- aaa:/var/lib/samba #ntlm_auth --username glouglou --domain pluton password: NT_STATUS_OK: Success (0x0) aaa:/var/lib/samba #
--------------------------------------------------------------
username is glouglou, password is glouglou!! and it works with ntlm_auth! any idea??
but that command (above) is not what you're telling freeradius to do. look at the output from FR and note the differences. as Iven has stated, you will need to use EITHER mschap:User-Name, OR carry on using Stripped-User-Name but activate the ntdomain hack and enable prefix doamin module - or stripped-user-name will still be wrong! alan
participants (2)
-
A.L.M.Buxey@lboro.ac.uk -
Reveal MAP