freeRADIUS -> AD Auth (<100kb)

Stefan Paetow Stefan.Paetow at
Wed Aug 13 11:49:42 CEST 2014

Here’s your problem:

        ntlm_auth = "/etc/freeradius/modules/ntlm_auth --request-nt-key --domain=OBLAN --username==%{%{User-Name}:-None}}"

You have to set ntlm_auth to the path of the ntlm_auth binary… not the FreeRADIUS module.

It usually lives in /usr/bin. ‘which ntlm_auth’ usually tells you where.


From: at [ at] On Behalf Of nfischer at
Sent: 13 August 2014 09:59
To: freeradius-users at
Subject: freeRADIUS -> AD Auth (<100kb)

Hi there!

I have a problem with the auth against an Active Directory.
I would be very thankfull if you could help me.

Im tring to setup an WiFi Network where the Useres can auth with their AD Useraccs,

WiFi-Router with DD-WRT
Ubuntu 10.04LTS with FreeRADIUS kerberus samba etc.
AD at a Windows Server 2008 SBS (Total mess never install it!)

The communicatuion W-Lan Client->Router->FreeRADIUS runs.
The Ubuntu Server is in the Domain, wbinfo -u gives me all Users.
The auth via NTLM_AUTH runns too:
/etc/freeradius$ ntlm_auth --request-nt-key --domain=DOMAINNAME --username=USERNAME
NT_STATUS_OK: Success (0x0)

I think just FreeRADIUS is configured wrong.
The auth fails, respectively does not take place.

I put the config files and the freeradius -X output in the attachment.
(I removed a few unimportant configfiles to not hit the 100kb limit of this mailinglist.)

Many thanks in advance!

Mit freundlichem Gruß
Nicolas Fischer

email: nfischer at<mailto:nfischer at>
jabber: jagger at<mailto:jagger at>
tel: 01573-0420888
Skype: jagger64
TOX: Just ask me :)

If you sent me a PGP Crypted Mail I´ll be happy and will give you a free cookie :)

Janet(UK) is a trading name of Jisc Collections and Janet Limited, a 
not-for-profit company which is registered in England under No. 2881024 
and whose Registered Office is at Lumen House, Library Avenue,
Harwell Oxford, Didcot, Oxfordshire. OX11 0SG. VAT No. 614944238

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the Freeradius-Users mailing list