again: 802.1x auto login with win login/pass

[tnt at kalik.net]

>Hi all, I have a problem, can't authenticate my user with win login user/pass.
>
>I use:
>- 802.1x
>- newest freeradius, and ubuntu 8.4
>- eap-tls
>- win xp sp2 client, use automatic win logon and pass
>
>When "Automatically use my Windows login name and password" is unchecked
>on the windows, i type user/pass and my radius is accept the request.
>and everything is okay.
>
>But, When i try it with automatic win login/pass, the radius reject the request.
>I set the with-ntdomain-hack=yes to preprocess and it cut the domain part.
>its seems okay but still reject.
>
>I have good user settings.
>
>what is the problem? password encription?
>

No.

>the debug log:
>
>rad_recv: Access-Request packet from host 192.168.1.1 port 1812, id=228,
>length=160
..
>    User-Name = "DOMAIN\\Joe"
..
>[suffix] No '@' in User-Name = "Joe", looking up realm NULL
..
>[eap] Identity does not match User-Name, setting from EAP Identity.
..

You are rewriting the User-Name. Don't do that.

Ivan Kalik
Kalik Informatika ISP