Hi, I have a wifi with wpa2, with peap and mschap2, with db users with active directory, and all is working fine if my users log in with: WINDOWSDOMAIN\userlogin as username, but if the users auth as userlogin, the server reply: Auth: Login incorrect (rlm_mschap: No such user (0xc0000064)): There's a method to rewrite the login name to add WINDOWSDOMAIN\ to the beginning of login or to make that radius add a default domain to all users? Thanks.
I have a wifi with wpa2, with peap and mschap2, with db users with active directory, and all is working fine if my users log in with:
WINDOWSDOMAIN\userlogin
as username, but if the users auth as userlogin, the server reply: Auth: Login incorrect (rlm_mschap: No such user (0xc0000064)):
There's a method to rewrite the login name to add WINDOWSDOMAIN\ to the beginning of login or to make that radius add a default domain to all users?
Yes, but that would break EAP. Don't do that. It's better to fix the domain on the ntlm_auth line. Ivan Kalik Kalik Informatika ISP
That is my ntlm_auth: ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --domain=%{mschap:NT-DOMAIN} --username=%{mschap:User-Name} --challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}" What i can change to fix that? On Thu, Aug 27, 2009 at 12:16, Ivan Kalik<tnt@kalik.net> wrote:
I have a wifi with wpa2, with peap and mschap2, with db users with active directory, and all is working fine if my users log in with:
WINDOWSDOMAIN\userlogin
as username, but if the users auth as userlogin, the server reply: Auth: Login incorrect (rlm_mschap: No such user (0xc0000064)):
There's a method to rewrite the login name to add WINDOWSDOMAIN\ to the beginning of login or to make that radius add a default domain to all users?
Yes, but that would break EAP. Don't do that. It's better to fix the domain on the ntlm_auth line.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
That is my ntlm_auth: ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --domain=%{mschap:NT-DOMAIN} --username=%{mschap:User-Name} --challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}"
What i can change to fix that?
currently you have --domain=%{mschap:NT-DOMAIN} which sets the domain to NT_DOMAIN that the usert supplied...so if they dont supply a domain then bang!. change this, therefore to either be your wanted value, or remove it. alan
If I change NT-DOMAIN by the name of my real domain, the radius don't work. I have changed the --domain by: --domain=%{%{mschap:NT-DOMAIN}:-WINDOWSDOMAIN} Where WINDOWSDOMAIN is the real name of my domain, as told me Ivan Kalik, and all is working. On Thu, Aug 27, 2009 at 14:36, Alan Buxey<A.L.M.Buxey@lboro.ac.uk> wrote:
Hi,
That is my ntlm_auth: ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --domain=%{mschap:NT-DOMAIN} --username=%{mschap:User-Name} --challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}"
What i can change to fix that?
currently you have --domain=%{mschap:NT-DOMAIN} which sets the domain to NT_DOMAIN that the usert supplied...so if they dont supply a domain then bang!. change this, therefore to either be your wanted value, or remove it.
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Alan Buxey -
David Rodríguez Fernández -
Ivan Kalik