search for: authenticating_freeradius_aga

Hi all, I'm trying to use ntlm_auth as authenticator of the freeradius mschap module. If I use ntlm_auth from command line with username and password, authentication works. If I use the same credentials with mschap on the logs I can see the challenge and nt-response and I can't understand if authentication fails because challenge and response are wrong or because ntlm_auth can't

Hello, i've configured a new freeradius server for WLAN authentication. My radius server is a domain member on my samba 4.7.12 ADDC. For my mschap configuration i followd this guide: https://wiki.samba.org/index.php/Authenticating_Freeradius_against_Active_Directory. The auth works! I can configure ntlm_auth in two differents way? ntlm_auth = "/path/to/ntlm_auth*--allow-mschapv2* --request-nt-key --username=%{mschap:User-Name} --domain=MYDOMAIN --challenge=%{%{mschap:Challenge}:-00} --nt-response=%{%{mschap:NT-Response}:-00}"...

Just follow this and it "just works" https://wiki.samba.org/index.php/Authenticating_Freeradius_against_Active_Directory And this is asking for problems. workgroup = WSISIZ.EDU.PL Read : https://social.technet.microsoft.com/wiki/contents/articles/34981.active-directory-best-practices-for-internal-domain-and-network-names.aspx And from this link : https://support.microsoft.com/nl-nl/help/90...

...up in 0.2 seconds. Waking up in 0.7 seconds. (614) Sending delayed response (614) Sent Access-Reject Id 112 from 127.0.0.1:1812 to 127.0.0.1:51747 length 61 (614)?? MS-CHAP-Error = "\000E=691 R=1 C=1ea8abc7f8bc2ca7 V=2" Waking up in 3.9 seconds. I read: https://wiki.samba.org/index.php/Authenticating_Freeradius_against_Active_Directory (where i found audit.log?) https://wiki.freeradius.org/guide/FreeRADIUS-Active-Directory-Integration-HOWTO https://wiki.freeradius.org/guide/Active-Directory-direct-via-winbind I have no idea why it does not work - maybe somebody on list have idea? Best Regards -- Bar...