On Jun 2, 2015, at 9:03 , Sohaib Afourid <[email protected]> wrote:
> [eap] EAP/mschapv2
> [eap] processing type mschapv2
> [mschapv2] # Executing group from file
> /usr/local/pf/raddb/sites-enabled/packetfence-tunnel
> [mschapv2] +group MS-CHAP {
> [mschap] Creating challenge hash with username: nissan
> [mschap] Client is using MS-CHAPv2 for nissan, we need NT-Password
> [mschap] expand: %{Stripped-User-Name} ->
> [mschap] ... expanding second conditional
> [mschap] expand: %{mschap:User-Name:-None} -> nissan
> [mschap] expand:
> --username=%{%{Stripped-User-Name}:-%{mschap:User-Name:-None}} ->
> --username=nissan
> [mschap] Creating challenge hash with username: nissan
> [mschap] expand: %{mschap:Challenge} -> 49106125f04d05d3
> [mschap] expand: --challenge=%{%{mschap:Challenge}:-00} ->
> --challenge=49106125f04d05d3
> [mschap] expand: %{mschap:NT-Response} ->
> ad6e2a534fb8b31fa7c37680ff407539360fdb4f422e6804
> [mschap] expand: --nt-response=%{%{mschap:NT-Response}:-00} ->
> --nt-response=ad6e2a534fb8b31fa7c37680ff407539360fdb4f422e6804
> --request-nt-key: unknown option
> Exec output:
> [mschap] Exec: program returned: 1
> [mschap] External script failed.
> [mschap] FAILED: MS-CHAP2-Response is incorrect
> ++[mschap] = reject
> +} # group MS-CHAP = reject
This part is odd.
What do these commands return?
# /usr/bin/ntlm_auth
# rpm -qa samba-winbind-clients\*
--
Louis Munro
[email protected] :: www.inverse.ca
+1.514.447.4918 x125 :: +1 (866) 353-6153 x125
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence
(www.packetfence.org)------------------------------------------------------------------------------
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
