Re: EAP-PEAP + Windows 7 with SSO and Password change
Hi Alan,
CD DD wrote:
Hi Alan,
i'm sorry to bother you again.
I compiled now the "GIT" version (it's the same as download version), >and i got the same results.
The FR is really 3.0.0. you can see that in the debug log. There is no differences in the results as before i did.
So what's wrong ? I used also a cleaned config base (remove the old, and install the git >config). But all the time the same:
Did you read raddb/mods-available/mschap?
It contains instructions for configuring password changes. You need to configure the "passchange" subsection with the right paths, and then allow retries, and give it a retry message.
Alan DeKok.
Yes, as you can see in the mschap config the passchange subsection is configured, as well as the retry and retry message. send errors are also enabled in the mschapv2 config from eap section. But i got from the ntlm_auth Error 691 which are send back to client. Normaly there must be error core 648, or not ? regards, C. -- NEU: FreePhone 3-fach-Flat mit kostenlosem Smartphone! Jetzt informieren: http://mobile.1und1.de/?ac=OM.PW.PW003K20328T7073a
On 12/06/12 17:09, CD DD wrote:
But i got from the ntlm_auth Error 691 which are send back to client.
Please post full debugging output i.e. run "radiusd -X" and post the output to the list. Better yet, gather the debug output and READ IT carefully first, to see if you can spot the problem. The MSCHAP password change code looks for the string "Password expired" in the output of the ntlm_auth command. If your ntlm_auth is printing something different, it'll just assume it's a regular failure.
participants (2)
-
CD DD -
Phil Mayers