Badger David <[EMAIL PROTECTED]> wrote: > I am attempting to authorise/authenticate xp supplicant to an NT4 domain > through a cisco AP.
The server doesn't support that. > Freeradius-snapshot-20040302 is compiled with > experimental modules and eap is configured to utilise the rlm_smb module, How? I don't see how you could possibly configure that. > Freeradius is unable to authenticate (what I assume is the NT hash). This is > the offending line.. > "auth: Failed to validate the user. > Login incorrect: [david/<no User-Password attribute>] (from client localhost > port 0)" Nope. The offending line is much before that: > rlm_eap: processing type mschapv2 > modcall: entering group Auth-Type for request 6 > rlm_mschap: No User-Password configured. Cannot create LM-Password. > rlm_mschap: No User-Password configured. Cannot create NT-Password. > rlm_mschap: No LM-Password or NT-Password attribute found. Cannot perform > MS-CHAP authentication. You don't have a plain-text password, or an NT-Password to authenticate the user, so the module rejects it. If you can somehow convince samba to supply an NT-Password, then you can feed that to the server, and the mschap module will use it. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
