So I finally got the idea, whats wrong. Tehre were missing premissions. I tried to run ntlm_auth under radiusd user and got same error as in logs. Reading winbind reply failed! (0xc0000001) Adding rediusd to winbind group solved the problem. A.