Re: Radius 2.22.40: Can't authenticate against NT

Kurt Schafer ( (no email) )
Tue, 3 Feb 1998 11:20:21 -0500

Uhm, is the name of your NT domain "DOMAIN"

ie, if the name of the NT domain you log into is FLUFFY your password entry
for the user you want to authenticate via the SAM should read WINNT\FLUFFY

- Kurt

-----Original Message-----
From: Darryl Ackernecht <dackernecht@darefoods.com>
To: RadiusNT Mailing List <RadiusNT@emerald.iea.com>
Cc: Darryl Ackernecht <dackernecht@darefoods.com>
Date: Monday, February 02, 1998 5:13 PM
Subject: Radius 2.22.40: Can't authenticate against NT

>We've been unsuccessful in trying to get RadiusNT to authenticate against
>the NT SAM. So far we've been testing by starting up with 'radius -x15' at
>the command prompt, logged into the domain as an Administrator (using
>radlogin to test).
>
>Here is our USERS file:
>testuser Password="WINNT\DOMAIN"
> User-Service=Framed-User
>
>Debug output:
>radrecv: Request from host ac100810 code=1, id=1, length=0
> NAS-Identifier = 127.0.0.1
> NAS-Port = 0
> User-Name = "testuser"
> Password = "\356\0228|U;$)\355\2139\336M\345\316P"
>rad_authenticate()
>Checking user record PW_PASSWORD type
>authPapPwd
>chkPwd->strvalue is WINNT\DOMAIN
>decrypted pwd is newpass
>(WINNT) User:testuser Domain:DOMAIN Password:newpass
>Sending Reject of id 1 to ac100810 (172.16.8.16)
>Resp Time: 10 Auth: 1/2 -> 3 Acct: 0/0/0 -> 0
>
>We don't have any problems trying to authenticate a non-NT user. Any help
>would be appreciated.
>
>
>Darryl Ackernecht
>dackernecht@darefoods.com
>
>
> ----------------------------------------------------------
> RadiusNT Mailing List lists@iea-software.com
>
>