Somewhat OT: Windows VIsta annoyance: sends local login credentials
2010/3/30 Julien Savoie <julien.savoie@usainteanne.ca>:
Check if you have this enabled in radiusd.conf
mschap { with_ntdomain_hack = yes }
realm ntdomain { format = prefix delimiter = "\\" ignore_default = no ignore_null = no }
and proxy.conf
realm DEFAULT { strip }
If you only have one domain this will work. If you have different domains you'll need to setup the individual realms. Sounds like in your case you don't though.
Hi Julien, file /etc/raddb/modules/mschap is as original one. I use no domain, only user+password. Sorry, but I forget the subject before. Thanks in advance!
Sergio Belkin wrote:
There are a few log entries like as as follows Auth: Login incorrect (rlm_ldap: User not found): [QSARGENTINA\\amumenthaler] (from client UP-PVIII-VIII-Bis port 0 via TLS tunnel)
Please could you help me to find a fix?
-
-- -- Open Kairos http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com Sergio Belkin -
Sergio Belkin wrote:
and proxy.conf
realm DEFAULT { strip }
If you only have one domain this will work. If you have different domains you'll need to setup the individual realms. Sounds like in your case you don't though.
Hi Julien, file /etc/raddb/modules/mschap is as original one. I use no domain, only user+password. Sorry, but I forget the subject before.
Then you want to by default strip any realm/domain information off the request. Information provided should be sufficient.
2010/3/31 Julien Savoie <julien.savoie@usainteanne.ca>:
Sergio Belkin wrote:
and proxy.conf
realm DEFAULT { strip }
If you only have one domain this will work. If you have different domains you'll need to setup the individual realms. Sounds like in your case you don't though.
Hi Julien, file /etc/raddb/modules/mschap is as original one. I use no domain, only user+password. Sorry, but I forget the subject before.
Then you want to by default strip any realm/domain information off the request. Information provided should be sufficient.
Really thanks, but the problem is that users use their personal notebooks, they are students, not employees, so Windows login usernames are not the same that ldap ones. It seems that Vista wants to use SSO and sends their credential before. Because of that subject is somewhat OT, but I guess that someone here was run into that problem... thanks in advance! -- -- Open Kairos http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com Sergio Belkin -
Sergio Belkin wrote:
Really thanks, but the problem is that users use their personal notebooks, they are students, not employees, so Windows login usernames are not the same that ldap ones. It seems that Vista wants to use SSO and sends their credential before. Because of that subject is somewhat OT, but I guess that someone here was run into that problem... thanks in advance! Then what you have is a windows configuration problem and not a freeradius problem. I'd suggest google for howto instructions.
participants (2)
-
Julien Savoie -
Sergio Belkin