Authentication failed

Stefan Winter stefan.winter at restena.lu
Thu Jul 12 13:59:55 CEST 2007


> We have entered this data in radiusd.conf:
>
> # Be VERY careful when editing the following line!
> 		#
> 		#ntlm_auth = "/path/to/ntlm_auth --request-nt-key
> --username=%{Stripped-User-Name:-%{User-Name:-None}}
> --challenge=%{mschap:Challenge:-00}
> --nt-response=%{mschap:NT-Response:-00}"
>
>                 ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key
>                                  --domain=%{mschap:NT-Domain}
>                                  --username=%{mschap:User-Name}
>                                  --challenge=%{mschap:Challenge:-00}
>                                  --nt-response=%{mschap:NT-Response:-00}"
>
>
> Maybe, the "intro" after every line is not correct, so we have changed it
> for:
>
> ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key
> --domain=%{mschap:NT-Domain} --username=%{mschap:User-Name}
> --challenge=%{mschap:Challenge:-00}    
> --nt-response=%{mschap:NT-Response:-00}"
>
>
> And the problem continues.

Well, this is "UNIX 101": if you want a command to continue over multiple 
lines, you have to put a \ (Backslash) at the end of the lines. The spaces 
themselves are perfectly fine. Something like

                 ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key \
                                  --domain=%{mschap:NT-Domain} \
                                  --username=%{mschap:User-Name} \
                                  --challenge=%{mschap:Challenge:-00} \
                                  --nt-response=%{mschap:NT-Response:-00}"

should work a lot better. Go buy a book about UNIX command-line tools ;-)

Stefan

-- 
Stefan WINTER

Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de 
la Recherche
Ingenieur Forschung & Entwicklung

6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg
E-Mail: stefan.winter at restena.lu     Tel.:     +352 424409-1
http://www.restena.lu                Fax:      +352 422473
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20070712/96fa0e37/attachment.pgp>


More information about the Freeradius-Users mailing list