Re: FreeRadius with ntlm_auth

2009-12-07 Thread charles
Hi, Allan: My domain comes through as part of the request. Sorry, but I didn´t understand this: if so you can simply use the example ntlm_auth to do the substitution. Can you explain it better ? Thanks. Charles. Hi, Hi All: My name is Charles and I need to Configure my FreeRadius

Re: FreeRadius with ntlm_auth

2009-12-07 Thread Alan Buxey
Hi, My domain comes through as part of the request. Sorry, but I didn´t understand this: if so you can simply use the example ntlm_auth to do the substitution. Can you explain it better ? hmm, looks like the domain part of the default config is gone...anyway, you can do something like

FreeRadius with ntlm_auth

2009-12-03 Thread charles
Hi All: My name is Charles and I need to Configure my FreeRadius to use ntlm_auth to authenticate NT users. Actually, I am getting to do this for only one NT group, but I need to do this for more NT groups. My configuration in radius.conf for ntlm_auth for one NT group is: exec

Re: FreeRadius with ntlm_auth

2009-12-03 Thread Alan Buxey
Hi, Hi All: My name is Charles and I need to Configure my FreeRadius to use ntlm_auth to authenticate NT users. Actually, I am getting to do this for only one NT group, but I need to do this for more NT groups. My configuration in radius.conf for ntlm_auth for one NT group

Re: FreeRadius with ntlm_auth

2009-12-03 Thread freeradius
At 08:44 AM 12/3/2009, char...@copel.com wrote: My environment is: FreeBSD 6.2 + Samba 3.0.26a + freeradius 1.1.7 How can I do this configuration for more than one NT group ? Any idea ? See my post from Re: separating users, ~6:30, 12/1/09 I tried your approach (separate ntlm_auth execs).

Re: FreeRadius with ntlm_auth

2009-12-03 Thread Charles
I'd love to know how you will acheive this . I need to do the same - Original Message - ou wi From: char...@copel.com To: freeradius-users@lists.freeradius.org Sent: Thursday, December 03, 2009 3:44 PM Subject: FreeRadius with ntlm_auth Hi All: My name is Charles

Re: FreeRadius with ntlm_auth

2009-12-03 Thread Alan DeKok
Charles wrote: I'd love to know how you will acheive this . I need to do the same Configure the LDAP module. Use LDAP-Group checking. authorize { ... if (LDAP-Group != foo) { reject } ... } - List info/subscribe/unsubscribe? See

Re: AW: freeradius and ntlm_auth howto

2006-11-16 Thread Stieven . Struyf
PROTECTED] Gesendet: Montag, 6. November 2006 16:17 An: King, Michael Cc: freeradius-users@lists.freeradius.org Betreff: RE: freeradius and ntlm_auth howto michael, The configuration works when i type in my username as '[EMAIL PROTECTED]', when i let windows fill it in i don't get in. My

RE: freeradius and ntlm_auth howto

2006-11-06 Thread King, Michael
MAIL PROTECTED] Sent: Monday, November 06, 2006 3:16 AMTo: King, MichaelSubject: Fw: freeradius and ntlm_auth howto Michael, I sent my reply already to the list, but due to the size(larger than 100k) it had to be reviewed by the admin and after a week it was rejected. Below you can

RE: freeradius and ntlm_auth howto

2006-11-06 Thread Stieven . Struyf
King, Michael [EMAIL PROTECTED] 11/06/2006 04:04 PM To [EMAIL PROTECTED], FreeRadius users mailing list freeradius-users@lists.freeradius.org cc Subject RE: freeradius and ntlm_auth howto Some things I've noticed from your attached files Module: Loaded MS-CHAP mschap: use_mppe

AW: freeradius and ntlm_auth howto

2006-11-06 Thread Hector.Ortiz
] Im Auftrag von [EMAIL PROTECTED]Gesendet: Montag, 6. November 2006 16:17An: King, MichaelCc: freeradius-users@lists.freeradius.orgBetreff: RE: freeradius and ntlm_auth howto michael, The configuration works when i type in my username as '[EMAIL PROTECTED]', when i let windows fill it in i don't

Re: freeradius and ntlm_auth howto

2006-10-27 Thread Stieven . Struyf
All, I finally got it working, but not yet as i want. The trick that made it work is settings auth-type := MSCHAPv2 for the user(s) and i also started radiusd as root(changed the rights without success to radiusd, but once everything is working i will try to run again with radiusd user) If i

Re: freeradius and ntlm_auth howto

2006-10-27 Thread Phil Mayers
[EMAIL PROTECTED] wrote: All, I finally got it working, but not yet as i want. The trick that made it work is settings auth-type := MSCHAPv2 for the You should not do that, and should not *have* to do that. Most likely you have not put the mschap module in the authorize section, *or* you

Re: freeradius and ntlm_auth howto

2006-10-27 Thread Stieven . Struyf
Here's the full log: Waking up in 6 seconds... rad_recv: Access-Request packet from host 10.104.254.73:1645, id=67, length=259 User-Name = KMT-EU.KMTG.NET\\sstruyf Framed-MTU = 1400 Called-Station-Id = 0016.469b.7cd0 Calling-Station-Id = 0011.851a.cc37 Service-Type =

RE: freeradius and ntlm_auth howto

2006-10-27 Thread Garber, Neal
Did you notice the response from ntlm_auth: Exec-Program: /usr/bin/ntlm_auth --request-nt-key --username=sstruyf --challenge=decc4450c3b83d2c --nt-response=1af36673f68f926b4cc76bf8cd9f440d0c36396981ad345 Exec-Program output: Logon failure (0xc06d) This indicates an invalid

RE: freeradius and ntlm_auth howto

2006-10-27 Thread Stieven . Struyf
[EMAIL PROTECTED] wrote on 10/27/2006 02:54:52 PM: Did you notice the response from ntlm_auth: Exec-Program: /usr/bin/ntlm_auth --request-nt-key --username=sstruyf --challenge=decc4450c3b83d2c --nt- response=1af36673f68f926b4cc76bf8cd9f440d0c36396981ad345 Exec-Program output:

RE: freeradius and ntlm_auth howto

2006-10-27 Thread King, Michael
Let's see if we can get this solved... -Original Message- Here's the full log: Waking up in 6 seconds... rad_recv: Access-Request packet from host 10.104.254.73:1645, This is NOT the full log. The full log would have started with the line /path/to/radiusd -X Some important

freeradius and ntlm_auth howto

2006-10-26 Thread Stieven . Struyf
All, I am trying to authenticate my wifi users via our AD. I'm finding bits and pieces on the internet to configure things, but no completely usable howto. Can someone of the users look at the ouput below and point me to the correct solution/howto? I setup smb.conf,krb5.conf and freeradius. I

RE: freeradius and ntlm_auth howto

2006-10-26 Thread Jonathan De Graeve
PROTECTED] [mailto:freeradius-users- [EMAIL PROTECTED] Namens [EMAIL PROTECTED] Verzonden: donderdag 26 oktober 2006 16:24 Aan: freeradius-users@lists.freeradius.org Onderwerp: freeradius and ntlm_auth howto All, I am trying to authenticate my wifi users via our AD. I'm finding bits and pieces

Re: freeradius and ntlm_auth howto

2006-10-26 Thread Alan DeKok
[EMAIL PROTECTED] wrote: I am trying to authenticate my wifi users via our AD. I'm finding bits and pieces on the internet to configure things, but no completely usable howto. What's missing from any of the HOWTO's? There's some on the Wiki, and one on my site. Exec-Program-Wait: