On Mon, 2005-05-16 at 09:28 +0200, Javier Jimenez wrote: > Hil list! > I'm trying to authenticate Active Directory Users via freeradius. I > can do it in a general case (user and domain) without > problem. Now I have to do it restricting the authentication to the > members of a group.
> Exec-Program: /usr/bin/ntlm_auth --request-nt-key --username=javi2 > --require-membership-of='AAMM\MyGroup' --domain=AAMM > --challenge=6b480cf181ded625 > --nt-response=bce392db1fcd91380690317e7cd1228e78940576d78fde21 > [2005/05/16 09:05:57, 0] utils/ntlm_auth.c:get_require_membership_sid > (237) > Winbindd lookupname failed to resolve 'AAMM\MyGroup' into a SID! Looking at the source, the issue appears to be the quotes. FreeRadius does not go via a shell, which means that the ' characters are not stripped off. (The ntlm_auth source shows that this debug message is printed without any quotes, which means you supplied them) > Does anybody know why could it be happening? Thanks in advance for any help!! -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net
signature.asc
Description: This is a digitally signed message part
-- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba