Freeradius2.1.3 + Fedora9 + PEAP + AD = problem

[Alan DeKok]

Mike Loosbrock wrote:
> Check the versions of your samba packages.
> 
> I'm running Debian and the exact same FreeRADIUS configuration works
> with 3.0.24 (stable) but fails with 3.2.5 (testing). The failure is such
> that the mschap module returns success, but the very last EAP-MSCHAPv2
> challenge sent by the server causes the supplicant (both Windows and
> OSX) to bail. There's apparently something wrong with the NT_KEY
> returned by ntlm_auth...

  Ouch.  Samba 3.2.8 is out, so that might fix the issue.

  If not, we'll have to raise it as a bug with the Samba people.

  Alan DeKok.