New User and AD Question

[Alan Buxey]

Hi,

> Found Auth-Type = EAP
> +- entering group authenticate {...}
> [eap] Request found, released from the list
> [eap] EAP/mschapv2
> [eap] processing type mschapv2
> [mschapv2] +- entering group MS-CHAP {...}
> [mschap] Told to do MS-CHAPv2 for host/dnps-caplap-4.col.missouri.edu with NT-Password
> [mschap]        expand: %{Stripped-User-Name} -> 
> [mschap] WARNING: Deprecated conditional expansion ":-".  See "man unlang" for details
> ## NOTE THE NEXT THREE LINES:
> [mschap]        expand: %{User-Name:-None} -> host/dnps-caplap-4.col.missouri.edu
> [mschap]        expand: --username=%{%{Stripped-User-Name}:-%{User-Name:-None}} -> --username=host/dnps-caplap-4.col.missouri.edu
> [mschap]        expand: --domain=%{mschap:NT-Domain} -> --domain=col
> [mschap]  mschap2: e8
> [mschap]        expand: --challenge=%{mschap:Challenge:-00} -> --challenge=665bcdce0a4676a0
> [mschap]        expand: --nt-response=%{mschap:NT-Response:-00} -> --nt-response=ac910bfec0608f8f666352ef38ffdd6d6298a98ef35b9b41

this output does not match with what you claim to have been using.

please ensure that your ntlm_auth configuration is correct and the right one is being called.
(this one in debug is looking at %{Stripped-User-Name} etc - you claimed to be using %{mschap:User-Name}

alan