Hello Durand

Thank you for your reply. The raddebug replies with ok.

I could solve the problem yesterday by running " chroot /chroots/mydomain
ntlm_auth --username=restricteduser  --password=xxx ". Then I got this
message: "The user account is restricted so that it cannot be used to log
on from the source workstation. (0xc0000070)"

running that command with a user that doesn't have a defined workstation
(could logon to all computers on the network), I would receive a successful
message, and with a user that has a name in the workstation field, I
received the above reply. So I decided to add my domain's server name
(Primary-DC and Secondary-DC) to the allowed computers of the restricted
user and boom! everything is ok now. :)

I just have to add these computer names to all of my users allowed
workstation fields.

Thanks again man.

On Tue, Feb 26, 2019 at 12:15 AM Durand fabrice via PacketFence-users <
[email protected]> wrote:

> Hello saskatooner,
>
> can you run raddebug and paste the result ?
>
> raddebug -f /usr/local/pf/var/run/radiusd.cock -t 3000
>
>
> Regards
>
> Fabrice
> Le 19-02-23 à 01 h 50, saskatooner Canada via PacketFence-users a écrit :
>
> Hi
>
> I have pf joint to my active directory. everything works well but when on
> my AD I set a logon workstation for a user, that user cannot get
> authenticated on pf.
>
> I mean on my AD, the user properties, account, Logon To, the logon
> Workstations should be set to all computers and if I set a computer name,
> the packetfence says the user name/password is incorrect.
>
> Is this a bug or I should define something special in this section? I have
> used my server's name: "packetfence" and/or the uses's computer name, with
> no luck.
>
>
> I have also submitted this on github on this link (
> https://github.com/inverse-inc/packetfence/issues/4013) and nqb gave me
> some clues but I don't know how to use them.
>
>
> Thanks!
>
>
> _______________________________________________
> PacketFence-users mailing 
> [email protected]https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
> _______________________________________________
> PacketFence-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to