Alan,

      You seem to be one of the most knowledgeable folks on the list. Can you provide any input? All help is appreciated.

 

 

Chad.

 

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bohannan, Chad W
Sent: Friday, December 02, 2005 12:51 PM
To: FreeRadius users mailing list
Subject: RADIUS Auth-Type

 

OK, here is the situation. I have successfully configured RADIUS to authenticate/authorize NAS requests from my Cisco gear so long as the user “Auth-Type= System”. I have also managed to get Samba working and have joined the radius server to the AD realm in question. This is confirmed through the following:

 

ntlm_auth --request-nt-key --domain=MYDOMAIN --username=MYUID

password:xxxxx

NT_STATUS_OK: Success (0x0)

 

wbinfo -a MYUID%MYPASSWD

plaintext password authentication failed

error code was NT_STATUS_NO_SUCH_USER (0xc0000064)

error messsage was: No such user

Could not authenticate user MYUID%MTPASSWD with plaintext password

challenge/response password authentication succeeded

 

However, when I edit the /etc/raddb/users file and change the “Auth-Type= System” to “Auth-Type=MSCAP” all authentication attempts fail. Am I specifying the correct auth-type? Have I missed a step? Is there something I can do (debug maybe) that will better assist in identifying the problem? Any and all suggestions are appreciated.

 

I am attempting to have RADIUS proxy authentication requests to AD, then assign attributes if authentication succeeds.

 

 

Chad

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to