MS-CHAP2-Response is incorrect

[Alan Buxey]

Hi

Does the relevant ntlm_auth command work on the command line of your
freeradius box? You might also want to increase some samba lounging and
check the smbd and winbind logs.

I also see an 691 error.  This may come about because a user’s Active
Directory account is configured to deny dial-in access and the server is
not configured to ignore user account dial-in properties

alan