Re: EAP-PEAP + Windows 7 with SSO and Password change

2012-06-14 Thread CD DD
Hi Phil, src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c: about line 741, maybe this: pairmove2(response, handler-request-reply-vps, PW_MSCHAP_ERROR, 0); ...should be: pairmove2(response, handler-request-reply-vps, PW_MSCHAP_ERROR,

Re: EAP-PEAP + Windows 7 with SSO and Password change

2012-06-13 Thread CD DD
Hi Phil, Alan, Ok. ntlm_auth is returning something different to what I saw in testing. Have you set the must change password at next login bit, as opposed to expired bit? Try this: 1. Edit src/modules/rlm_mschap/rlm_mschap.c about line 1100, where it says: if (strstr(buffer, Password

RE: EAP-PEAP + Windows 7 with SSO and Password change

2012-06-12 Thread CD DD
Hi Alan, yes, i tried now the latest freeradius version from git master: (alandekok-freeradius-server-release_2_1_7-1596-g3ce9b29.zip) But i have still the same issue, that the password change is not handled. I added my config files and the debug output as attachment, maybe i missed some

Re: EAP-PEAP + Windows 7 with SSO and Password change

2012-06-12 Thread CD DD
Hi Alan, well, i downloaded the zip file, because the server did not have git protocoll allowed per firewall. But i checked the git version against the zip downloaded version, and it is the same version. yes, i tried now the latest freeradius version from git master:

RE: EAP-PEAP + Windows 7 with SSO and Password change

2012-06-12 Thread CD DD
Hi Alan, i'm sorry to bother you again. I compiled now the GIT version (it's the same as download version), and i got the same results. The FR is really 3.0.0. you can see that in the debug log. There is no differences in the results as before i did. So what's wrong ? I used also a cleaned

Re: EAP-PEAP + Windows 7 with SSO and Password change

2012-06-12 Thread CD DD
Hi Alan, CD DD wrote: Hi Alan, i'm sorry to bother you again. I compiled now the GIT version (it's the same as download version), and i got the same results. The FR is really 3.0.0. you can see that in the debug log. There is no differences in the results as before i did. So

RE: EAP-PEAP + Windows 7 with SSO and Password change

2012-06-12 Thread CD DD
Hi Phil, But i got from the ntlm_auth Error 691 which are send back to client. Please post full debugging output i.e. run radiusd -X and post the output to the list. Better yet, gather the debug output and READ IT carefully first, to see if you can spot the problem. The MSCHAP password

EAP-PEAP + Windows 7 with SSO and Password change

2012-06-06 Thread CD DD
Hi, regarding Amans post from Apr 5.: Aman Arneja arneja.aman at gmail.com wrote: Password change and retry is very much supported for Windows and Eap for (P)eap-mschapv2. There would be some flag that needs to be set for this after which it will work, will check what that flag is and

Re: EAP-PEAP + Windows 7 with SSO and Password change

2012-04-12 Thread CD DD
Hi, it seems that is not possible that a user can change the password on loggon screen in windows 7 with freeradius after it has expired, except i use a windows IAS / NPS Server, or not ? I debugged the RAS crap on windows side and in the Logs i have: [3564] 04-12 12:02:33:182:

Re: EAP-PEAP + Windows 7 with SSO and Password change

2012-04-08 Thread CD DD
User-Name = DOMAIN\\test-user3 Service-Type = Framed-User Thanks a lot, C. CD DD wrote: and how do i get this working ? read raddb/mods-available/mschap Alan DeKok. -- Empfehlen Sie GMX DSL Ihren Freunden und Bekannten und wir belohnen Sie mit bis zu 50,- Euro! https

Re: Re: EAP-PEAP + Windows 7 with SSO and Password change

2012-04-05 Thread CD DD
Hi Alan, and how do i get this working ? I installed freeradius 3.0.0 and tested it, no chance by me ! Thanks, Alan DeKok wrote: Aman Arneja wrote: Password change and retry is very much supported for Windows and Eap for (P)eap-mschapv2. There would be some flag that needs to be set for