Problem with rlm_mschap from CVS

2005-11-14 Thread Luca Corti
Hello, I'm using Freeradius from CVS (checked out today) to do WPA-EAP+Radius +PEAP+ntlm_auth because I can't get rlm_eap_peap from 1.0.5 to build on debian. When trying to authenticate everything seems to be fine, but fails when executing ntlm_auth. Here's the debugging log. Processing the

Re: Problem with rlm_mschap from CVS

2005-11-14 Thread Michael Griego
It's a configuration issue. You didn't configure the rlm_exec module, which is called to execute ntlm_auth. --Mike Luca Corti wrote: Hello, I'm using Freeradius from CVS (checked out today) to do WPA-EAP+Radius +PEAP+ntlm_auth because I can't get rlm_eap_peap from 1.0.5 to build on debian.

Re: Problem with rlm_mschap from CVS

2005-11-14 Thread Nicolas Baradakis
Luca Corti wrote: > When trying to authenticate everything seems to be fine, but fails when > executing ntlm_auth. [...] > error: /usr/lib/freeradius/rlm_mschap-1.1.0-pre0.so: undefined symbol: > radius_exec_program > > Is this a configuration issue or a bug? It's a bug. It seems I removed too

Re: Problem with rlm_mschap from CVS

2005-11-14 Thread Nicolas Baradakis
Michael Griego wrote: > It's a configuration issue. You didn't configure the rlm_exec module, > which is called to execute ntlm_auth. I think it was working in version 1.0.x without rlm_exec module instantiated. Moreover, I'm not sure if the linker is able to find the missing symbol in a differ

Re: Problem with rlm_mschap from CVS

2005-11-14 Thread Michael Griego
Nicolas Baradakis wrote: I think it was working in version 1.0.x without rlm_exec module instantiated. Moreover, I'm not sure if the linker is able to find the missing symbol in a different module on all systems... It was working with 1.0.x and in CVS until the changes you mentioned. In my cas

Re: Problem with rlm_mschap from CVS

2005-11-14 Thread Alan DeKok
Nicolas Baradakis <[EMAIL PROTECTED]> wrote: > The possible solutions are: > 1. Reverse previous changes and move the file exec.c back to src/main. Maybe. If other modules need it, that's where it should go. > 2. Copy the file exec.c into src/modules/rlm_mschap, too. No. > 3. In rlm_mschap

Re: Problem with rlm_mschap from CVS

2005-11-14 Thread Luca Corti
On Mon, 2005-11-14 at 11:09 -0600, Michael Griego wrote: > It's a configuration issue. You didn't configure the rlm_exec module, > which is called to execute ntlm_auth. Is anything else needed besides exec { wait = yes input_pairs = request } an

Re: Problem with rlm_mschap from CVS

2005-11-14 Thread Michael Griego
Another possibility for "linking" between modules without truly linking would be to change rlm_mschap to use radius_xlat with the %{exec:...} xlat. Just depends on what others thing. I'm not opposed to moving exec.c back into the server core. -Mike Alan DeKok wrote: Nicolas Baradakis <[EM

Re: Problem with rlm_mschap from CVS

2005-11-14 Thread Nicolas Baradakis
Alan DeKok wrote: > > The possible solutions are: > > 1. Reverse previous changes and move the file exec.c back to src/main. > > Maybe. If other modules need it, that's where it should go. I've moved this file because it isn't used by the server core anymore, but I didn't noticed the module rl

Re: Problem with rlm_mschap from CVS

2005-11-14 Thread Nicolas Baradakis
Luca Corti wrote: > On Mon, 2005-11-14 at 11:09 -0600, Michael Griego wrote: > > It's a configuration issue. You didn't configure the rlm_exec module, > > which is called to execute ntlm_auth. > > Is anything else needed besides > > exec { > wait = yes >

[Was: Problem with rlm_mschap from CVS] rlm_mschap: Unknown expansion string

2005-11-15 Thread Luca Corti
Hello, I've checked out the exec.c fixes, but now there seem to be problems with variables passwed to ntlm_auth. Processing the authenticate section of radiusd.conf modcall: entering group MS-CHAP for request 30 rlm_mschap: No User-Password configured. Cannot create LM-Password. rlm_mschap

Re: [Was: Problem with rlm_mschap from CVS] rlm_mschap: Unknown expansion string

2005-11-15 Thread Michael Griego
Luca Corti wrote: Here is my ntlm_auth configuration: ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --username={Stripped-User-Name:-%{User-Name:-None}} --challenge={mschap:Challenge:-00} --nt-response={mschap:NT-Response:-00} IIRC, with the changes to the xlat stuff a while back for module