Re: Windows Server 2008 R2 (was already working...)

2010-04-08 Thread mr typo
so mschap is working again, but now radius stops processing at sending the access-challenge to the accesspoint. it should not be a certificate problem, since the error is happening with all devices (win, mac, mobiles,..). proxy requests to another radius are working fine. andy ideas? i am

Re: Windows Server 2008 R2 (was already working...)

2010-04-08 Thread mr typo
update: not working again. 4 or 5 requests were working, now it is the same problem again. stopping at the access-challenge.. -euro On Thu, Apr 8, 2010 at 8:36 AM, mr typo euroregist...@gmail.com wrote: so mschap is working again, but now radius stops processing at sending the

Re: Windows Server 2008 R2 (was already working...)

2010-04-08 Thread Alan DeKok
mr typo wrote: update: not working again. 4 or 5 requests were working, now it is the same problem again. stopping at the access-challenge.. Blame the Windows PC. It doesn't like the certificates. Remember: RADIUS is a protocol that RESPONDS to REQUESTS. If there are no requests, the

Re: Windows Server 2008 R2 (was already working...)

2010-04-08 Thread mr typo
humm, even when its not working with a mac or other devices? On Thu, Apr 8, 2010 at 8:49 AM, Alan DeKok al...@deployingradius.comwrote: mr typo wrote: update: not working again. 4 or 5 requests were working, now it is the same problem again. stopping at the access-challenge.. Blame

Re: Windows Server 2008 R2 (was already working...)

2010-04-08 Thread Alan DeKok
mr typo wrote: humm, even when its not working with a mac or other devices? As I said... the client sends requests. If it doesn't, the client is choosing to stop. Work through my EAP deployment howto: http://deployingradius.com. Then the Active Directory Howto. At some point, it will

Re: Windows Server 2008 R2 (was already working...)

2010-04-08 Thread Alan DeKok
mr typo wrote: it works up to configuring freeradius to use ntml_auth for ms-chap password is double checked, everything else should be find. wbinfo works, ntlm_auth works, plain_ntlm works, certificates creates with makefile (so with xpextensions). it is really strange.. OK. It's a

Re: Windows Server 2008 R2 (was already working...)

2010-04-08 Thread mr typo
there was a bug with NT_STATUS_PIPE_DISCONNECTED from last year in the samba. i think i have tried 2 or 3 stable versions right now. ill gonna compile the latest from svn tree and report back after a view tests. -euro On Thu, Apr 8, 2010 at 4:03 PM, Alan DeKok al...@deployingradius.comwrote:

Re: Windows Server 2008 R2 (was already working...)

2010-04-07 Thread mr typo
hello, i have added the with_nt_domain_hack in the mschapv2 section of eap.conf mschapv2 { with_ntdomain_hack = yes } with this change i am getting the following in debug log: [eap] processing type mschapv2 [mschapv2] +- entering group MS-CHAP {...}

Windows Server 2008 R2 (was already working...)

2010-04-06 Thread mr typo
hey all, we do have a freeradius server authenticating with ntml_auth against a win 2008r2 server. this was working for several months but for 2 weeks now the authentication does not work anymore. authenticating on the command line with ntlm_auth is still working: [r...@wlan ~]# ntlm_auth

Re: Windows Server 2008 R2 (was already working...)

2010-04-06 Thread Alan DeKok
mr typo wrote: [mschap] Told to do MS-CHAPv2 for asart...@fh-salzburg.ac.at mailto:asart...@fh-salzburg.ac.at with NT-Password [mschap] FAILED: No NT/LM-Password. Cannot perform authentication. You forced MS-CHAP (i.e. non-ntlm_auth) authentication in FreeRADIUS. Fix that. Alan DeKok. -

Re: Windows Server 2008 R2 (was already working...)

2010-04-06 Thread mr typo
ill try that. it is just strange that it worked until now.. in the module mschap i am doing a ntlm_auth request. that is how the authenticate sections looks like now. authenticate { Auth-Type MS-CHAP { mschap } eap }