Re: Radius 2.22.40: Can't authenticate against NT

Darryl Ackernecht ( dackernecht@darefoods.com )
Wed, 4 Feb 1998 17:20:16 -0500

We did get this working - a reinstall of NT solved the problem (it was a
development machine). The only extra right that we granted was Log on
Locally.

Darryl Ackernecht
dackernecht@darefoods.com

-----Original Message-----
From: Kurt Schafer <kahuna@cyberbeach.net>
To: RadiusNT@iea-software.com <RadiusNT@iea-software.com>
Date: Tuesday, February 03, 1998 3:17 PM
Subject: Re: Radius 2.22.40: Can't authenticate against NT

>Uhm, is the name of your NT domain "DOMAIN"
>
>ie, if the name of the NT domain you log into is FLUFFY your password entry
>for the user you want to authenticate via the SAM should read
WINNT\FLUFFY
>
>- Kurt
>
>-----Original Message-----
>From: Darryl Ackernecht <dackernecht@darefoods.com>
>To: RadiusNT Mailing List <RadiusNT@emerald.iea.com>
>Cc: Darryl Ackernecht <dackernecht@darefoods.com>
>Date: Monday, February 02, 1998 5:13 PM
>Subject: Radius 2.22.40: Can't authenticate against NT
>
>
>>We've been unsuccessful in trying to get RadiusNT to authenticate against
>>the NT SAM. So far we've been testing by starting up with 'radius -x15'
at
>>the command prompt, logged into the domain as an Administrator (using
>>radlogin to test).
>>
>>Here is our USERS file:
>>testuser Password="WINNT\DOMAIN"
>> User-Service=Framed-User
>>
>>Debug output:
>>radrecv: Request from host ac100810 code=1, id=1, length=0
>> NAS-Identifier = 127.0.0.1
>> NAS-Port = 0
>> User-Name = "testuser"
>> Password = "\356\0228|U;$)\355\2139\336M\345\316P"
>>rad_authenticate()
>>Checking user record PW_PASSWORD type
>>authPapPwd
>>chkPwd->strvalue is WINNT\DOMAIN
>>decrypted pwd is newpass
>>(WINNT) User:testuser Domain:DOMAIN Password:newpass
>>Sending Reject of id 1 to ac100810 (172.16.8.16)
>>Resp Time: 10 Auth: 1/2 -> 3 Acct: 0/0/0 -> 0
>>
>>We don't have any problems trying to authenticate a non-NT user. Any help
>>would be appreciated.
>>
>>
>>Darryl Ackernecht
>>dackernecht@darefoods.com