FreeRADIUS Active Directory Integration

[Nicolas Goutte]

Am 14.05.2009 um 19:31 schrieb Davies, Mike:

> We’re not able to get the user authenticated.
>
>
>
[...]

> radiusd: #### Loading Virtual Servers ####
>
> server inner-tunnel {
>
>  modules {
>
>  Module: Checking authenticate {...} for more modules to load
>
>  Module: Linked to module rlm_chap
>
>  Module: Instantiating chap
>
>  Module: Instantiating ntlm_auth
>
>   exec ntlm_auth {
>
>   wait = yes
>
>   program = "/usr/bin/ntlm_auth --request-nt-key --domain=DOM002 -- 
> username=%{mschap:User-Name} --password=%{User-Password}"
>
I do not know much about ntlm_auth but I can see that this call seems  
to differ widely compared to the change that was proposed in the last  
hours for Freeradius 2.1.6:


ntlm_auth = "/path/to/ntlm_auth --request-nt-key --username=%{% 
{Stripped-User-Name}:-%{User-Name:-None}} --challenge=% 
{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}"

See archive: http://lists.freeradius.org/pipermail/freeradius-users/ 
2009-May/msg00254.html

>   input_pairs = "request"
>
>   shell_escape = yes
>
>   }
>
[...]

> This e-mail message, including any attachments, is for the sole use  
> of the intended recipient(s) and may contain information that is  
> confidential and protected by law from unauthorized disclosure. Any  
> unauthorized review, use, disclosure or distribution is prohibited.  
> If you are not the intended recipient, please contact the sender by  
> reply e-mail and destroy all copies of the original message.
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/ 
> users.html

Have a nice day!

Nicolas Goutte


extragroup GmbH - Karlsruhe
Waldstr. 49
76133 Karlsruhe
Germany

Geschäftsführer: Stephan Mönninghoff, Hans Martin Kern, Tilman Haerdle
Registergericht: Amtsgericht Münster / HRB: 5624
Steuer Nr.: 337/5903/0421 / UstID: DE 204607841



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20090514/b3e4bad4/attachment.html>