On 25/06/10 22:23, Alan DeKok wrote: > Neil Prockter wrote: >> this is a config that works for PAP/LDAP but not PEAP/MSCHANPv2 > > Change the version of Samba. From eap.conf: > > # If is still doesn't work, and you're using Samba, > # you may be encountering a Samba bug. See: > # > # https://bugzilla.samba.org/show_bug.cgi?id=6563 > # > # Note that we do not necessarily agree with their > # explanation... but the fix does appear to work. > # > Note that this problem *never* appears if the Cleartext-Password is > available to FreeRADIUS. It *only* happens when Samba is being used. > > Try this for yourself. Configure a Cleartext-Password in the "users" > file for a test user, and disable ntlm_auth. If PEAP/MSCHAPv2 works, > then the problem is Samba, not FreeRADIUS. Cleartext-Password worked.
I had started on 3.4.7 which I'd hoped was free of the issue. I tried downgrading to samba-3.2.15 that didn't help then I tried samba-3.0.37 that did so I'll try sticking with that for a while. Thank you. Neil Please access the attached hyperlink for an important electronic communications disclaimer: http://www.lse.ac.uk/collections/planningAndCorporatePolicy/legalandComplianceTeam/legal/disclaimer.htm - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
