Re: EAP-PEAP GTC vs MSCHAPv2

Alan, I finally made EAP-GTC using ntlm_auth to work. Basically my initial configuration inside "gtc" sub-section of raddb/eap.conf was correct and modifying raddb/modules/ntlm_auth from "%{mschap:User-Name}" to "%{User-Name}" was also correct. I can also use %{%{mschap:User-Name}:-%{User-Name}} t

Re: EAP-PEAP GTC vs MSCHAPv2

Don wrote: > Nothing secret, as I said I tried both configuration (one at a time) > inside "gtc" sub-section of eap.conf. That's a problem. NOTHING in the documentation or examples says to do that. LOTS of documentation and examples give the CORRECT way to use ntlm_auth. > I did that, but tha

Re: EAP-PEAP GTC vs MSCHAPv2

On Fri, Sep 27, 2013 at 6:34 AM, Alan DeKok wrote: > Don wrote: > > I tried one of these inside "gtc" sub-section of eap.conf, that don't > > seem to work: > > auth_type = ntlm_auth > > Setting that *should* be one step of a working configuration. > Ok, thank you for confirming that the

Re: EAP-PEAP GTC vs MSCHAPv2

Don wrote: > I tried one of these inside "gtc" sub-section of eap.conf, that don't > seem to work: > auth_type = ntlm_auth Setting that *should* be one step of a working configuration. > or > ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key > --domain=MYDOMAIN --username=%{User-