Edvin Seferovic wrote:

Does this have anything to do with the authentication method and AD ? I don't think so.

Neither do I! We're not looking at AD yet. A colleague of mine tried to set it up for JRS by roughly copying someone else's configuration. It failed. So I reinstalled FreeRadius and samba from scratch and started again; re-introducing changes one at at time. I acan make ntlm_auth work from command line but not from FreeRadius yet - so I dropped it and am trying to ensure I can run a minimal test.

Ken are you using 64bit OS maybe? I had the same problem ( shared secret was "incorrect" ) due a broken library on 64bit version of SuSE 9.1.

Er, I don't think so! Well, I hope not! (wondering how to tell for sure...) # uname -a Linux ficus.ccs.bbk.ac.uk 2.6.20-1.2962.fc6 #1 SMP Tue Jun 19 18:24:12 EDT 2007 i686 i686 i386 GNU/Linux # # getconf LONG_BIT 32 # # getconf WORD_BIT 32 # # file /usr/local/bin/radclient /usr/local/bin/radclient: ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.9, stripped # # # cat /proc/cpuinfo processor : 3 vendor_id : GenuineIntel cpu family : 15 model : 4 model name : Intel(R) Xeon(TM) CPU 3.00GHz stepping : 10 cpu MHz : 3000.487 cache size : 2048 KB physical id : 3 siblings : 2 core id : 0 cpu cores : 1 fdiv_bug : no hlt_bug : no f00f_bug : no coma_bug : no fpu : yes fpu_exception : yes cpuid level : 5 wp : yes flags : fpu vme de pse tsc msr pae mce cx8 apic mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe lm constant_tsc pni monitor ds_cpl cid cx16 xtpr lahf_lm bogomips : 5999.40 clflush size : 64