Problems with XPsp3 and FreeRADIUS

[Axel Vogel]

Hi Seth,

we authenticate WinXPsp3 supplicants via PEAP/MS-Chapv2 with
FreeRADIUS against Win2k3 AD.
We are using FreeRADIUS 2.1.6 and samba 3.2.7. This works fine
for user authentication and for host authentication too.
I suggest a test with these versions to eliminate possible
configuration issues ...

good luck

Axel


Seth schrieb:
> Alan,
> 
> We are currently using Samba 3.0.34... Do you know if there are release
> notes or a discussion regarding this issue you can point me to, I didnt see
> anything from a search.
> 
> Thanks,
> 
> /Seth
> 
> On Thu, Jan 14, 2010 at 9:29 AM, Alan DeKok <aland at deployingradius.com>wrote:
> 
>> Seth wrote:
>>> I have a strange problem where the initial 802.1X authentication is
>>> successful, but then fails subsequent auth attempts.  This is using
>>> Windows XP sp3 PEAP/MS-Chapv2, FreeRADIUS 2.1.3, with Active Directory
>>> running on a Windows2003 server.
>>>
>>> I noticed the following discrepency in the RADIUS logs.  The two auth
>>> attempts are identical until this part:
>>   You are using ntlm_auth for authentication.  This issue appears to be
>> a bug in Samba.  Downgrade Samba until you find a version that works.
>>
>>  Alan DeKok.
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
>>
> 
> 
> ------------------------------------------------------------------------
> 
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


-- 

Axel Vogel

Network/Operations                         |
Bundesamt fuer Kartographie und Geodaesie  | Tel.: +49 341 5634 203
Aussenstelle Leipzig                       | Fax: +49 341 5634 1984
Karl-Rothe-Str. 10-14                      |
D-04105 Leipzig                            | 012deg 22' 26.75" E
Federal Republic of Germany                | 51deg 21' 14.50" N