ntlm_auth woes

[Alan DeKok]

On May 29, 2017, at 8:23 AM, Tim ODriscoll <tim.odriscoll at lambrookschool.co.uk> wrote:
> On 29 May 2017 12:53
>> On May 28, 2017, at 4:16 PM, Tim ODriscoll <tim.odriscoll at lambrookschool.co.uk> wrote:
>>> I'm running freeradius 2.1.12
>>   Why?  That's 6 years old, and is horribly out of date.
> 
> That's what Ubuntu 14.04's package manager tells me is available. The server is due to be rebuilt as CentOS in a few weeks..

  It's always possible to build your own packages.  Even the CentOS packages are terrible out ofd date.

>>> ntlm_auth works fine from the command line, using username and password,
>>   As root?  or as the "radiusd" user?
> 
> I tried both, but it seems it's when I try chap authentication (using challenge and nt-response arguments) with ntlm_auth is when it breaks.

  CHAP won't work with ntlm_auth:

http://deployingradius.com/documents/protocols/compatibility.html

  Alan DeKok.