On Thu, Dec 8, 2011 at 6:11 AM, lint <[email protected]> wrote:
> Alan, here is the output of everything with a failed request:
Did you read this?
> Module: Linked to module rlm_chap
> Module: Instantiating module "chap" from file /etc/raddb/modules/chap
> Module: Linked to module rlm_mschap
> Module: Instantiating module "mschap" from file
> /etc/raddb/modules/mschap.org
> mschap {
> use_mppe = yes
> require_encryption = no
> require_strong = no
> with_ntdomain_hack = no
> allow_retry = yes
> }
and http://deployingradius.com/documents/configuration/active_directory.html
, section Configuring FreeRADIUS to use ntlm_auth for MS-CHAP:
"... Then, fine the mschap module in raddb/modules/mschap file, and
look for the line containing ntlm_auth = . It is commented out by
default, and should be uncommented, and edited to be as follows ..."
you either have NOT edit it, or have a rogue file
(/etc/raddb/modules/mschap.org?) that messed up your configuration.
Fix it until the debug log shows mschap module is using ntlm_auth.
--
Fajar
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
