MS-CHAP2-Response is incorrect

Alan Buxey alan.buxey at
Wed Sep 1 23:11:12 CEST 2021


Does the relevant ntlm_auth command work on the command line of your
freeradius box? You might also want to increase some samba lounging and
check the smbd and winbind logs.

I also see an 691 error.  This may come about because a user’s Active
Directory account is configured to deny dial-in access and the server is
not configured to ignore user account dial-in properties


More information about the Freeradius-Users mailing list