> -----Original Message----- > If it helps, this the ntlm command (which i think you have correct): > /usr/bin/ntlm_auth --request-nt-key --username=cse-mpr$ > --challenge=4de0a9c09623ab12 > --nt-response=d4b9516b28ba1760f8d31f8ac2b257d74a2439b9e104a102 > > - are you passing the domain correctly? (i dont specify the domain on > the ntlm_auth command line, whereas you have) i have the following in > samba.conf >
I didn't have the ntlm_auth line correct. I did have the domain correct. I had this in the radius.conf file ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --username=%{mschap:User-Name} --domain=%{mschap:NT-Domain} --challenge=%{msc hap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00} BUT, in my notes, and on my working server, I had this: ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --username=%{mschap:User-Name} --challenge=%{mschap:Challenge} --nt-response= %{mschap:NT-Response}" I removed the :-00 from the NT-Response and the Challenge options, and I also removed the --domain, since I had no idea why it was in there either. I think I only replaced bits and pieces of the default line in the example config, instead of deleting the whole line and pasting in my notes. Thanks, it works great now! - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html