> > root@FREERADIUS:/etc/freeradius# ntlm_auth --username=0024D6650564
> > --password=Pa$$w0rd
> > NT_STATUS_OK: Success (0x0)
> > root@FREERADIUS:/etc/freeradius# ntlm_auth --username=0024D670F3A6
> > --password=Pa$$w0rd
> > NT_STATUS_OK: Success (0x0)
> > root@FREERADIUS:/etc/freeradius# ntlm_aut
Hi,
> home_server localhost {
> ipaddr = 127.0.0.1
> port = 1812
> type = "auth"
> secret = "testing123"
> response_window = 20
> max_outstanding = 65536
> require_message_authenticator = no
> ...
>
> Is this secret what is being used by th
On 03/04/2011 01:32 AM, robert22 wrote:
Phil Mayers wrote:
Are you sure the mschap client is using the right password, and matches
the password in the domain?
Can you do a plaintext auth with the password you expect it to be?
ntlm_auth --username= --password=
Works fine with plaintext aut
robert22 wrote:
> Interestingly, when I launch freeradius -X for debug mode, I see the
> following in the startup info:
...
> Is this secret what is being used by the freeradius?? As I have no idea
> where this is coming from as I have replaced all instances of the
> "testing123" in all of the conf
Interestingly, when I launch freeradius -X for debug mode, I see the
following in the startup info:
...
home_server localhost {
ipaddr = 127.0.0.1
port = 1812
type = "auth"
secret = "testing123"
response_window = 20
max_outstanding = 65536
r
Phil Mayers wrote:
>
> Are you sure the mschap client is using the right password, and matches
> the password in the domain?
>
> Can you do a plaintext auth with the password you expect it to be?
>
> ntlm_auth --username= --password=
>
Works fine with plaintext auth:
root@FREERADIUS:/etc/fr
On 03/03/2011 11:07 PM, robert22 wrote:
McNutt, Justin M. wrote:
Also check that winbind is working like this:
wbinfo --all-domains
If you don't see a list of all valid NT-style domains, winbind is broken
and you'll have to fix that first.
that command displays all the domains correctly.
McNutt, Justin M. wrote:
>
> Also check that winbind is working like this:
>
> wbinfo --all-domains
>
> If you don't see a list of all valid NT-style domains, winbind is broken
> and you'll have to fix that first.
>
that command displays all the domains correctly.
However, running the ntlm_a
> I am trying to setup freeRadius to process requests from our Wireless
> Controller. The controller uses the wireless devices MAC
> address as the
> username, and a predefined password. These MAC addresses all excist in
> Active Directory as user accounts, with the same password
> set. This work
> Found Auth-Type = MSCHAP
> +- entering group MS-CHAP {...}
> [mschap] Told to do MS-CHAPv1 with NT-Password
> [mschap]expand: --username=%{mschap:User-Name:-None} ->
> --username=001E52805980
> [mschap] No NT-Domain was found in the User-Name.
> [mschap]expand: %{mschap:NT-Domain}
> > Im using Samba version 3.5.4 and FreeRADIUS Version 2.1.9
> on Ubuntu 10.10.
I'm using 3.5.4 and FreeRADIUS 2.1.7. Should be okay.
--J
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
> Im using Samba version 3.5.4 and FreeRADIUS Version 2.1.9 on Ubuntu 10.10.
same 3.5.x early releases had wierd bugs. believe this is fixed since samba
3.5.6
alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Alan Buxey wrote:
>
> Hi,
>
>> program = "/usr/bin/ntlm_auth --request-nt-key --domain=MY.ACTUAL.DOMAIN
>> --username=%{mschap:User-Name} --password=%{User-Password}"
>>
>> I havent changed anything to the users file except adding in a test local
>> user as part of the initial FreeRadius instal
Hi,
> program = "/usr/bin/ntlm_auth --request-nt-key --domain=MY.ACTUAL.DOMAIN
> --username=%{mschap:User-Name} --password=%{User-Password}"
>
> I havent changed anything to the users file except adding in a test local
> user as part of the initial FreeRadius install guide, and uncommenting the
>
robert22 wrote:
> I am trying to setup freeRadius to process requests from our Wireless
> Controller. The controller uses the wireless devices MAC address as the
> username, and a predefined password. These MAC addresses all excist in
> Active Directory as user accounts, with the same password set.
15 matches
Mail list logo