Re: Could'nt authenticate windows host account with freeradius + ldap backend + samba domain controller

2007-12-18 Thread Alan DeKok
[EMAIL PROTECTED] wrote: In the radiusd.conf config file, the %{Stripped-User-Name} is correctly created from %{User-Name}. That's not the issue. The issue is that something is editing the User-Name attribute. That editing is breaking EAP. I have made some tests with and without the

Re: Could'nt authenticate windows host account with freeradius + ldap backend + samba domain controller

2007-12-18 Thread david.barbion
Alan DeKok a écrit : [EMAIL PROTECTED] wrote: In the radiusd.conf config file, the %{Stripped-User-Name} is correctly created from %{User-Name}. That's not the issue. The issue is that something is editing the User-Name attribute. That editing is breaking EAP. Okay, I

Re: Could'nt authenticate windows host account with freeradius + ldap backend + samba domain controller

2007-12-17 Thread david.barbion
Alan DeKok a écrit : Thanks for your answers. [EMAIL PROTECTED] wrote: Hello, The problem is when a computer tries to authenticate, the User-Name sent is host//computername/, but in ldap we have entrie like /computername/$. So we have some attr_rewrite that removes host/ and adds the

Could'nt authenticate windows host account with freeradius + ldap backend + samba domain controller

2007-12-14 Thread david.barbion
Hello, We have a Samba domain controller (3.0.9) with freeradius on it and several windows XP SP2 workstations attached to it. Actually, this wired setup is working correctly. We are planning to use wifi on those workstations but we encounters many problems. Here our wifi setup: Our APs

Re: Could'nt authenticate windows host account with freeradius + ldap backend + samba domain controller

2007-12-14 Thread Alan DeKok
[EMAIL PROTECTED] wrote: Hello, The problem is when a computer tries to authenticate, the User-Name sent is host//computername/, but in ldap we have entrie like /computername/$. So we have some attr_rewrite that removes host/ and adds the dollar sign. Why? You can just create a *new*