Could'nt authenticate windows host account with freeradius + ldap backend + samba domain controller

Alan DeKok aland at
Tue Dec 18 11:25:18 CET 2007

david.barbion at wrote:
> In the radiusd.conf config file, the %{Stripped-User-Name} is correctly
> created from %{User-Name}.

  That's not the issue.  The issue is that something is editing the
User-Name attribute.  That editing is breaking EAP.

> I have made some tests with and without the %{User-Name} change, but
> nothing helps

  Other people have this working.  It *is* possible.

> I have another question: How does the EAP/MSCHAPV2 authentication work ?
> which username/password couples does it take ? and with which database
> does it compare to ?

  It doesn't compare anything to a database.  Passwords are obtained
from whatever database you choose, using whatever queries you choose.

  Alan DeKok.

More information about the Freeradius-Users mailing list