Re: FR 1.1.7 + AD 2003 + LDAP

2008-05-01 Thread Charlie B
Hello Everyone, So in my world we have been able to diagnose that the authentication issue is related to the username case (only difference in Radius) and I have not found anything other than a statement in an old post from Alan about AD being case sensitive with usernames? Is there any

Re: FR 1.1.7 + AD 2003 + LDAP

2008-05-01 Thread Charlie B
Just me again, User has reset there password the usual way however we are still getting fail login. Anyone with an idea or what I can provide to help solve this puzzle? Thx Thu May 1 09:07:33 2008 : Auth: Login incorrect: [brebberm/no User-Password attribute] (from client 10.0.1.12 port 60035

Re: FR 1.1.7 + AD 2003 + LDAP

2008-04-15 Thread Charlie B
Hello, Looks like the kerberos was only a piece to the puzzle. When a user enters the 14 day period prior to being required to change password, windows XP is changing the password of the user in some way that deauthenticates the user. any ideas? - List info/subscribe/unsubscribe? See

Re: FR 1.1.7 + AD 2003 + LDAP

2008-04-14 Thread Alan DeKok
Charlie B wrote: I'm really surprised at this issue. Something like this really puts me on the spot to have to bring up an IAS in order to deal with the password issue. I hate windoze but I though more than a handful of us would be running into this issue since I see there are a lot of

Re: FR 1.1.7 + AD 2003 + LDAP

2008-04-14 Thread A . L . M . Buxey
Hi, I'm really surprised at this issue. Something like this really puts me on the spot to have to bring up an IAS in order to deal with the password issue. I hate windoze but I though more than a handful of us would be running into this issue since I see there are a lot of freeradius + AD

Re: FR 1.1.7 + AD 2003 + LDAP

2008-04-14 Thread Charlie B
Hello Mr. DeKok, I wanted to say thank you, FreeRadius is the best, there is not better when it comes to radius. On to topic, I believe we have found the issue. It may be related to kerberos tickets and krb5.conf file were I had the realm in lower case. Found documentation that indicated it

Re: FR 1.1.7 + AD 2003 + LDAP

2008-04-13 Thread Charlie B
Thanks Alan, I'm really surprised at this issue. Something like this really puts me on the spot to have to bring up an IAS in order to deal with the password issue. I hate windoze but I though more than a handful of us would be running into this issue since I see there are a lot of freeradius +

Re: FR 1.1.7 + AD 2003 + LDAP

2008-04-12 Thread A . L . M . Buxey
Hi, Charlie B wrote: Has no one else experienced this issue where reset password confuses WinXP? I really don't want to use IAS. Anyone ideas? Let me get this straight: You have machines in the domain, users doing domain logins, and wired 802.1x using the domain credentials. When you

Re: FR 1.1.7 + AD 2003 + LDAP

2008-04-09 Thread Phil Mayers
Charlie B wrote: Has no one else experienced this issue where reset password confuses WinXP? I really don't want to use IAS. Anyone ideas? Let me get this straight: You have machines in the domain, users doing domain logins, and wired 802.1x using the domain credentials. When you change a

Re: FR 1.1.7 + AD 2003 + LDAP

2008-04-09 Thread Charlie B
Hi Phil, You are dead on with what is going on however this is occurring when the user enters the 14 days prior to being required to change their password, and even when the user themselves are prompted to change. Just so its clear. When user enters two week prior to being required to change

Re: FR 1.1.7 + AD 2003 + LDAP

2008-04-08 Thread Charlie B
Has no one else experienced this issue where reset password confuses WinXP? I really don't want to use IAS. Anyone ideas? Thanks - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

FR 1.1.7 + AD 2003 + LDAP

2008-04-07 Thread Charlie B
Hello everyone, We have setup FreeRadius w/ Active Direcotry using LDAP and ntlm as per the wiki and everything is working great save one item of concern. When our users are needing to reset their password or have reset their password ntlm fails I'm pretty certain that this is not a freeradius

Re: FR 1.1.7 + AD 2003 + LDAP

2008-04-07 Thread Ivan Kalik
Wrong key: http://support.microsoft.com/kb/823731 Ivan Kalik Kalik Informatika ISP Dana 8/4/2008, Charlie B [EMAIL PROTECTED] piše: Hello everyone, We have setup FreeRadius w/ Active Direcotry using LDAP and ntlm as per the wiki and everything is working great save one item of concern. When

Re: FR 1.1.7 + AD 2003 + LDAP

2008-04-07 Thread Charlie B
Thanks Ivan, We though there should be a key in the current logedon user as well, but all of our domain users don't have an entry in the registry, even though we have it check to cache the credentials. The only way we can produce this key is to have WinXP use the prompt for credentials balloon.

Re: FR 1.1.7 + AD 2003 + LDAP

2008-04-07 Thread Charlie B
I guess I should add that this is a wired connection, not that this should change too much. Thank you again! - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html