Re: Ntlm problem with peap

2004-08-31 Thread Nuno Miguel Pais Fernandes
Hi,

Running 1.0.0 on dual intel so little-endian.
Aparently challenge or nt-response are being generated wrongly, or it's
a bug in ntlm_auth.

rpm -qif /usr/bin/ntlm_auth
Name: samba-common
Version : 3.0.2

Any ideias? Is there any workaround to have peap with mschapv2 working
without ntlm?

Thanks
Nuno Fernandes

On Mon, 2004-08-30 at 19:43, Alan DeKok wrote:
 Nuno Miguel Pais Fernandes [EMAIL PROTECTED] wrote:
  I'm having problems using freeradius with peap and ntlm.
 
   If you're running on a big endian machine, there's a bug in
 src/lib/md4.c which breaks MS-CHAP, and therefore PEAP.
 
   We hope to release 1.0.1 soon, to address this issue.
 
   Alan DeKok.
 
 
 - 
 List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- 
Nuno Miguel Pais Fernandes [EMAIL PROTECTED]


signature.asc
Description: This is a digitally signed message part


Re: Ntlm problem with peap

2004-08-31 Thread Alan DeKok
Nuno Miguel Pais Fernandes [EMAIL PROTECTED] wrote:
 Running 1.0.0 on dual intel so little-endian.
 Aparently challenge or nt-response are being generated wrongly, or it's
 a bug in ntlm_auth.

  I've been running it on an x86 for a while, and I haven't seen any
problems like that.

 Any ideias? Is there any workaround to have peap with mschapv2 working
 without ntlm?

  Yes, supply a clear-text, or NT-Password.

  Alan DeKok.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Ntlm problem with peap

2004-08-31 Thread Dominique Demore
I will be away on holidays until September 2. Should you require immediate assistance, 
please contact Rod MacLeod or
George Gauthier.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Ntlm problem with peap

2004-08-31 Thread Nuno Miguel Pais Fernandes
Hi again,




On Tue, 2004-08-31 at 15:49, Alan DeKok wrote:
 Nuno Miguel Pais Fernandes [EMAIL PROTECTED] wrote:
  Running 1.0.0 on dual intel so little-endian.
  Aparently challenge or nt-response are being generated wrongly, or it's
  a bug in ntlm_auth.
 
   I've been running it on an x86 for a while, and I haven't seen any
 problems like that.

Do you suspect problems in xlat or in microsoft supplicant?

 
  Any ideias? Is there any workaround to have peap with mschapv2 working
  without ntlm?
 
   Yes, supply a clear-text, or NT-Password.

I don't have clear text password but i do have NT-Password (unfortunadly
in ldap and not starting with 0x). Could it work?

Thanks for all the help..
Nuno Fernandes

 
   Alan DeKok.
 
 
 - 
 List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- 
Nuno Miguel Pais Fernandes [EMAIL PROTECTED]


signature.asc
Description: This is a digitally signed message part


Re: Ntlm problem with peap

2004-08-31 Thread Alan DeKok
Nuno Miguel Pais Fernandes [EMAIL PROTECTED] wrote:
I've been running it on an x86 for a while, and I haven't seen any
  problems like that.
 
 Do you suspect problems in xlat or in microsoft supplicant?

  I have no idea.

 I don't have clear text password but i do have NT-Password (unfortunadly
 in ldap and not starting with 0x). Could it work?

  It should.  See src/modules/rlm_mschap/rlm_mschap.c

  Alan DeKok.



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html