freeradius with active directory

[bastardinho69]

David N'DAKPAZE wrote:
> hello,
> I am configuring freeradius for authentication with active 
> directory.I've used 
> http://deployingradius.com/documents/configuration/active_directory 
>  but freeradius reject all the requests because of no known 
> password.It what i have when i make a request:
>  
> Ready to process requests.
> rad_recv: Access-Request packet from host 127.0.0.1 port 51084, 
> id=198, length=61
>         User-Name = "azerty"
>         User-Password = "uiop"
>         NAS-IP-Address = 127.0.0.1
>         NAS-Port = 0
> +- entering group authorize {...}
> ++[preprocess] returns ok
> ++[chap] returns noop
> [suffix] No '@' <mailto:%27@%27> in User-Name = "azerty", looking up 
> realm NULL
> [suffix] No such realm "NULL"
> ++[suffix] returns noop
> ++[files] returns noop
> ++[expiration] returns noop
> ++[logintime] returns noop
> [pap] WARNING! No "known good" password found for the user.  
> Authentication may fail because of this.
> ++[pap] returns noop
> No authenticate method (Auth-Type) configuration found for the 
> request: Rejecting the user
> Failed to authenticate the user.
> Login incorrect: [azerty/uiop] (from client localhost port 0)
> Using Post-Auth-Type Reject
> +- entering group REJECT {...}
> [attr_filter.access_reject]     expand: %{User-Name} -> azerty
> attr_filter: Matched entry DEFAULT at line 11
> ++[attr_filter.access_reject] returns updated
> Delaying reject of request 0 for 1 seconds
> Going to the next request
> Waking up in 0.9 seconds.
> Sending delayed reject for request 0
> Sending Access-Reject of id 198 to 127.0.0.1 port 51084
> Waking up in 4.9 seconds.
> Cleaning up request 0 ID 198 with timestamp +27
>  
> Thanks for your help
> ------------------------------------------------------------------------
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
As far as i know, u should use mschap to authenticate against AD ;)