Petar Marinkovic wrote: > [mschap] Told to do MS-CHAPv2 for pmarinkovic with NT-Password > [mschap] expand: --username=%{mschap:User-Name:-None} -> > --username=pmarinkovic > > [mschap] mschap2: 30 > [mschap] expand: > --domain=%{mschap:NT-Domain:-EXCHANGE}--challenge=%{mschap:Challenge:-00} -> > --domain=EXCHANGE--challenge=73e442d7ccbf38a0
That's wrong... you need a space between the two command-line options. --domain=.... --challenge=... ^ SPACE > In radiusd.conf, I only added exec lines to modules section from the > tutorial > > |exec ntlm_auth { That's not being used here, so it's not affecting this example. > And mschap file in modules dir. I left those 3 commented lines, I tried > also with them, but no luck.|| > > mschap { > with_ntdomain_hack = yes > #use_mppe = yes > #require_encryption = yes > #require_strong = no > > ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key > --username=%{mschap:User-Name:-None} > --domain=%{mschap:NT-Domain:-EXCHANGE}--challenge=%{mschap:Challenge:-00} > --nt-response=%{mschap:NT-Response:-00}" You added the "--domain=.." portion too close to the "--challenge". > What I am doing wrong here? In eap.conf I only changed default_auth_type > to PEAP, and that's all. Many thanks for your help, and I would > appreaciate it a lot if you can help me, cause this thing is driving me > crazy for last 2-3 days. I read bunch of topics, but none helped.. Posting the debug log is *exactly* the information that was needed to solve this problem. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html