hello, i have added the with_nt_domain_hack in the mschapv2 section of eap.conf
mschapv2 { with_ntdomain_hack = yes } with this change i am getting the following in debug log: [eap] processing type mschapv2 [mschapv2] +- entering group MS-CHAP {...} [mschap] Told to do MS-CHAPv2 for asart...@fh-salzburg.ac.at with NT-Password [mschap] expand: --username=%{Stripped-User-Name} -> --username=asartori [mschap] mschap2: f9 [mschap] expand: --challenge=%{mschap:Challenge} -> --challenge=f06598f7d3c7a32d [mschap] expand: --nt-response=%{mschap:NT-Response} -> --nt-response=eee56e2489411d6d778ab1a40cee629b6abce82769c1c1d1 Exec-Program output: NT_KEY: 3395EA4C15F1E2CE98AB55D36DE5DFBB Exec-Program-Wait: plaintext: NT_KEY: 3395EA4C15F1E2CE98AB55D36DE5DFBB Exec-Program: returned: 0 [mschap] adding MS-CHAPv2 MPPE keys ++[mschap] returns ok MSCHAP Success ++[eap] returns handled but i never receive a access-accept. from my understanding it should work? the complete debug log is at: https://overlord.fh-salzburg.ac.at/~asartori/debug.txt i hope someone can help! kind regards -euro On Tue, Apr 6, 2010 at 8:02 PM, mr typo <euroregist...@gmail.com> wrote: > ill try that. it is just strange that it worked until now.. > > in the module mschap i am doing a ntlm_auth request. that is how the > authenticate sections looks like now. > > authenticate { > Auth-Type MS-CHAP { > mschap > } > eap > } > > so i configure ntlm_auth from the modules and put the directive ntlm_auth > just before "Auth-Type MS-CHAP"? > > ill try that tomorrow, right now i have no chance to test it out. > > regards > > -euro > > On Tue, Apr 6, 2010 at 5:20 PM, Alan DeKok <al...@deployingradius.com>wrote: > >> mr typo wrote: >> > [mschap] Told to do MS-CHAPv2 for asart...@fh-salzburg.ac.at >> > <mailto:asart...@fh-salzburg.ac.at> with NT-Password >> > [mschap] FAILED: No NT/LM-Password. Cannot perform authentication. >> >> You forced MS-CHAP (i.e. non-ntlm_auth) authentication in FreeRADIUS. >> Fix that. >> >> Alan DeKok. >> - >> List info/subscribe/unsubscribe? See >> http://www.freeradius.org/list/users.html >> > >
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html