New User and AD Question

McNutt, Justin M. McNuttJ at
Wed Mar 2 13:32:02 CET 2011

> > Note use of "%{mschap:User-Name}" and 
> "%{mschap:NT-Domain}".  Despite this, "host/computer.domain" 
> login attempts always fail.  Hence, trying to do the 
> translation manually via a regex and update clauses.
>   And what happens when you try to run ntlm_auth on the command-line?
>   i.e. take the string printed by the server, and keep running it by
> hand.  Play with the various parameters until it works.  
> Then, configure
> the server to run it with those parameters.

Also, here is the 'mschap' section from a recent attempt.  Note that the User-Name attribute is not changed to 'dnps-caplap-4$' nor is the NT-Domain attribute set to ''.  The User-Name attribute is being left unchanged and the NT-Domain attribute is set to 'col'.

So something in mschap is broken?  Perhaps is an old bug?  This is version 2.1.7 (built a little over a year ago, Dec. 2009).


More information about the Freeradius-Users mailing list