Re: Radius 2.22.40: Can't authenticate against NT

Darryl Ackernecht ( dackernecht@darefoods.com )
Tue, 3 Feb 1998 08:37:48 -0500

I created a global group for the domain and gave it the Log on Locally
right, and assigned the radius user (testuser - also a domain account) to
the group. We still get the same result. The radius server is a standalone
server in the domain.

We use Post.Office for mail, and when it authenticates against the domain we
can see the attempts in the NT event log on the domain controllers. With
RadiusNT, I don't see these attempts.

Is there any other criteria to be satisfied to get this to work?

Darryl Ackernecht
dackernecht@darefoods.com

-----Original Message-----
From: Dale E. Reed Jr. <daler@iea-software.com>
To: RadiusNT@iea-software.com <RadiusNT@iea-software.com>
Cc: RadiusNT Mailing List <RadiusNT@emerald.iea.com> Darryl Ackernecht
<dackernecht@darefoods.com>
Date: Monday, February 02, 1998 10:46 PM
Subject: Re: Radius 2.22.40: Can't authenticate against NT

>Make sure the user has Log On Locally rights for the machine.
>
>Darryl Ackernecht wrote:
>>
>> We've been unsuccessful in trying to get RadiusNT to authenticate against
>> the NT SAM. So far we've been testing by starting up with 'radius -x15'
at
>> the command prompt, logged into the domain as an Administrator (using
>> radlogin to test).
>>
>> Here is our USERS file:
>> testuser Password="WINNT\DOMAIN"
>> User-Service=Framed-User
>>
>> Debug output:
>> radrecv: Request from host ac100810 code=1, id=1, length=0
>> NAS-Identifier = 127.0.0.1
>> NAS-Port = 0
>> User-Name = "testuser"
>> Password = "\356\0228|U;$)\355\2139\336M\345\316P"
>> rad_authenticate()
>> Checking user record PW_PASSWORD type
>> authPapPwd
>> chkPwd->strvalue is WINNT\DOMAIN
>> decrypted pwd is newpass
>> (WINNT) User:testuser Domain:DOMAIN Password:newpass
>> Sending Reject of id 1 to ac100810 (172.16.8.16)
>> Resp Time: 10 Auth: 1/2 -> 3 Acct: 0/0/0 -> 0
>>
>> We don't have any problems trying to authenticate a non-NT user. Any
help
>> would be appreciated.
>>
>> Darryl Ackernecht
>> dackernecht@darefoods.com
>>
>> ----------------------------------------------------------
>> RadiusNT Mailing List lists@iea-software.com
>
>--
>Dale E. Reed Jr. (daler@iea-software.com)
>_________________________________________________________________
> IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs
> Internet Solutions for Today | http://www.iea-software.com
>
> ----------------------------------------------------------
> RadiusNT Mailing List lists@iea-software.com
>