RE: mschap with ntlm_auth and Active Directory

2011-03-04 Thread McNutt, Justin M.
> > root@FREERADIUS:/etc/freeradius# ntlm_auth --username=0024D6650564 > > --password=Pa$$w0rd > > NT_STATUS_OK: Success (0x0) > > root@FREERADIUS:/etc/freeradius# ntlm_auth --username=0024D670F3A6 > > --password=Pa$$w0rd > > NT_STATUS_OK: Success (0x0) > > root@FREERADIUS:/etc/freeradius# ntlm_aut

Re: mschap with ntlm_auth and Active Directory

2011-03-04 Thread Alan Buxey
Hi, > home_server localhost { > ipaddr = 127.0.0.1 > port = 1812 > type = "auth" > secret = "testing123" > response_window = 20 > max_outstanding = 65536 > require_message_authenticator = no > ... > > Is this secret what is being used by th

Re: mschap with ntlm_auth and Active Directory

2011-03-04 Thread Phil Mayers
On 03/04/2011 01:32 AM, robert22 wrote: Phil Mayers wrote: Are you sure the mschap client is using the right password, and matches the password in the domain? Can you do a plaintext auth with the password you expect it to be? ntlm_auth --username= --password= Works fine with plaintext aut

Re: mschap with ntlm_auth and Active Directory

2011-03-04 Thread Alan DeKok
robert22 wrote: > Interestingly, when I launch freeradius -X for debug mode, I see the > following in the startup info: ... > Is this secret what is being used by the freeradius?? As I have no idea > where this is coming from as I have replaced all instances of the > "testing123" in all of the conf

Re: mschap with ntlm_auth and Active Directory

2011-03-03 Thread robert22
Interestingly, when I launch freeradius -X for debug mode, I see the following in the startup info: ... home_server localhost { ipaddr = 127.0.0.1 port = 1812 type = "auth" secret = "testing123" response_window = 20 max_outstanding = 65536 r

Re: mschap with ntlm_auth and Active Directory

2011-03-03 Thread robert22
Phil Mayers wrote: > > Are you sure the mschap client is using the right password, and matches > the password in the domain? > > Can you do a plaintext auth with the password you expect it to be? > > ntlm_auth --username= --password= > Works fine with plaintext auth: root@FREERADIUS:/etc/fr

Re: mschap with ntlm_auth and Active Directory

2011-03-03 Thread Phil Mayers
On 03/03/2011 11:07 PM, robert22 wrote: McNutt, Justin M. wrote: Also check that winbind is working like this: wbinfo --all-domains If you don't see a list of all valid NT-style domains, winbind is broken and you'll have to fix that first. that command displays all the domains correctly.

RE: mschap with ntlm_auth and Active Directory

2011-03-03 Thread robert22
McNutt, Justin M. wrote: > > Also check that winbind is working like this: > > wbinfo --all-domains > > If you don't see a list of all valid NT-style domains, winbind is broken > and you'll have to fix that first. > that command displays all the domains correctly. However, running the ntlm_a

RE: mschap with ntlm_auth and Active Directory

2011-03-03 Thread McNutt, Justin M.
> I am trying to setup freeRadius to process requests from our Wireless > Controller. The controller uses the wireless devices MAC > address as the > username, and a predefined password. These MAC addresses all excist in > Active Directory as user accounts, with the same password > set. This work

RE: mschap with ntlm_auth and Active Directory

2011-03-03 Thread McNutt, Justin M.
> Found Auth-Type = MSCHAP > +- entering group MS-CHAP {...} > [mschap] Told to do MS-CHAPv1 with NT-Password > [mschap]expand: --username=%{mschap:User-Name:-None} -> > --username=001E52805980 > [mschap] No NT-Domain was found in the User-Name. > [mschap]expand: %{mschap:NT-Domain}

RE: mschap with ntlm_auth and Active Directory

2011-03-03 Thread McNutt, Justin M.
> > Im using Samba version 3.5.4 and FreeRADIUS Version 2.1.9 > on Ubuntu 10.10. I'm using 3.5.4 and FreeRADIUS 2.1.7. Should be okay. --J - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: mschap with ntlm_auth and Active Directory

2011-03-03 Thread Alan Buxey
Hi, > Im using Samba version 3.5.4 and FreeRADIUS Version 2.1.9 on Ubuntu 10.10. same 3.5.x early releases had wierd bugs. believe this is fixed since samba 3.5.6 alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: mschap with ntlm_auth and Active Directory

2011-03-03 Thread robert22
Alan Buxey wrote: > > Hi, > >> program = "/usr/bin/ntlm_auth --request-nt-key --domain=MY.ACTUAL.DOMAIN >> --username=%{mschap:User-Name} --password=%{User-Password}" >> >> I havent changed anything to the users file except adding in a test local >> user as part of the initial FreeRadius instal

Re: mschap with ntlm_auth and Active Directory

2011-03-03 Thread Alan Buxey
Hi, > program = "/usr/bin/ntlm_auth --request-nt-key --domain=MY.ACTUAL.DOMAIN > --username=%{mschap:User-Name} --password=%{User-Password}" > > I havent changed anything to the users file except adding in a test local > user as part of the initial FreeRadius install guide, and uncommenting the >

Re: mschap with ntlm_auth and Active Directory

2011-03-02 Thread Alan DeKok
robert22 wrote: > I am trying to setup freeRadius to process requests from our Wireless > Controller. The controller uses the wireless devices MAC address as the > username, and a predefined password. These MAC addresses all excist in > Active Directory as user accounts, with the same password set.