Re: EAP-PEAP GTC vs MSCHAPv2

2013-09-27 Thread Alan DeKok
Don wrote: I tried one of these inside gtc sub-section of eap.conf, that don't seem to work: auth_type = ntlm_auth Setting that *should* be one step of a working configuration. or ntlm_auth = /usr/bin/ntlm_auth --request-nt-key --domain=MYDOMAIN --username=%{User-Name}

Re: EAP-PEAP GTC vs MSCHAPv2

2013-09-27 Thread Don
On Fri, Sep 27, 2013 at 6:34 AM, Alan DeKok al...@deployingradius.comwrote: Don wrote: I tried one of these inside gtc sub-section of eap.conf, that don't seem to work: auth_type = ntlm_auth Setting that *should* be one step of a working configuration. Ok, thank you for

Re: EAP-PEAP GTC vs MSCHAPv2

2013-09-27 Thread Alan DeKok
Don wrote: Nothing secret, as I said I tried both configuration (one at a time) inside gtc sub-section of eap.conf. That's a problem. NOTHING in the documentation or examples says to do that. LOTS of documentation and examples give the CORRECT way to use ntlm_auth. I did that, but that

Re: EAP-PEAP GTC vs MSCHAPv2

2013-09-27 Thread Don
Alan, I finally made EAP-GTC using ntlm_auth to work. Basically my initial configuration inside gtc sub-section of raddb/eap.conf was correct and modifying raddb/modules/ntlm_auth from %{mschap:User-Name} to %{User-Name} was also correct. I can also use %{%{mschap:User-Name}:-%{User-Name}} that

EAP-PEAP GTC vs MSCHAPv2

2013-09-26 Thread Don
All, I have successfully configured freeRadius using EAP-PEAP with: 1. GTC to authenticate user against local password 2. MSCHAPv2 to authenticate user against Active Directory via ntlm_auth following instructions on this link:

Re: EAP-PEAP GTC vs MSCHAPv2

2013-09-26 Thread Alan DeKok
Don wrote: That said, if EAP-GTC can be used along with ntlm_auth how do I configure it to make that work? Read the gtc sub-section of eap.conf. It tells you how to make EAP-GTC use a particular authentication method. I tried to execute ntlm_auth passing --password=%{User-Password}, but

Re: EAP-PEAP GTC vs MSCHAPv2

2013-09-26 Thread Don
Alan, Thank you for your reply and please find my inline response below. On Thu, Sep 26, 2013 at 7:54 PM, Alan DeKok al...@deployingradius.comwrote: Don wrote: That said, if EAP-GTC can be used along with ntlm_auth how do I configure it to make that work? Read the gtc sub-section of