Fredrik Ohrn <[EMAIL PROTECTED]> wrote:
> Initially I had some trouble getting ntlm_auth accepting the username
> given to it (on the form domain\\username). I ended upp writing a small
> script that chopped of the domain\\ part before sending it to ntlm_auth,
> also had to add --domain=mydomain to the commandline.

  You can do:

 .ntlm_auth = "/path/to/ntlm_auth ... --username=%{mschap:User-Name} 
--domain=%{mschap:NT-Domain} .."

  And the MSCHAP module will take care of doing that for you.

> Unfortunatley the Windows XP client logs the following line:
> 
> [1440] 19:02:18:161: Failing Auth because we got a success/fail without T=
> LV.

  Run the server with "-Xxxx", and you should see a little more
debugging information from the PEAP tunnel.

  As to why that message happens, I don't know.  The server always
sends a proper TLV in the responses...

  Alan DeKok.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to