Hi, > On our new server, both freeradius (3.0.10) and openssl (OpenSSL 1.0.1e) > were working ok. But the winbind daemon (4.1.12) used to authenticate > mschapv2 with the windows domain [1] had some bug. use the winbind connection pool (upgrade to samba 4.2.x or 4.3.x) toavoid using ntlm_auth and the legacy winbind method alan