Hi,
> authorize {
> ...
> #
> # If you are using multiple kinds of realms, you probably
> # want to set "ignore_null = yes" for all of them.
> # Otherwise, when the first style of realm doesn't match,
> # the other styles won't be checked.
> #
> suffix
> # ntdomain
> ...
> #
> # If you are using /etc/smbpasswd, and are also doing
> # mschap authentication, the un-comment this line, and
> # configure the 'etc_smbpasswd' module, above.
> etc_smbpasswd
> ...
> }
>
> I un-commented "ntdomain". No change. The -X output can be seen at:
Hope you haven't given up yet. In a later message you write:
modcall[authorize]: module "mschap" returns noop for request 6
  rlm_realm: No '@' in User-Name = "ADMINNB\jseymour", looking up realm NULL
  rlm_realm: Found realm "NULL"
  rlm_realm: Adding Stripped-User-Name = "ADMINNB\jseymour"
  rlm_realm: Proxying request from user ADMINNB\jseymour to realm NULL
  rlm_realm: Adding Realm = "NULL"
  rlm_realm: Authentication realm is LOCAL.
Which makes me think that both "suffix" and "ntdomain" are active in
rlm_realms. Try turning off suffix, because suffix operates only on names
formatted like [EMAIL PROTECTED] In your case I think it tries to find a
suffix, doesn't, and then uses realm NONE because no realm delimiter is
found. If you turn suffix off, the delimiter \ is found and the request is
set to the DEFAULT realm. Hopefully.
Greetings,
Stefan Winter
--
Stefan WINTER
Fondation RESTENA - RÃseau TÃlÃinformatique de l'Education Nationale et de
la Recherche
IngÃnieur rÃseau et systÃme
6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg
email: [EMAIL PROTECTED] Â Â tÃl.: Â Â Â+352 424409-33
http://www.restena.lu           fax:   Â+352 422473
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
