[Samba] challenge/response problem in 4.5.5

ray klassen julius_ahenobarbus at yahoo.co.uk
Sun Mar 12 13:59:25 UTC 2017


Well yes it did then. Thank you!
but then it is interesting that "wbinfo -a" would also report a simple failure.
To me "plaintext" authorization looks(!) basic and "challenge/response" looks(!) more advanced. 
The impression is that there is something missing that should(!)  be working.

 

    On Sunday, 12 March 2017, 0:14, Andrew Bartlett via samba <samba at lists.samba.org> wrote:
 

 On Sun, 2017-03-12 at 07:04 +0000, ray klassen via samba wrote:
> is there any way to temporarily force the freeradius unit to talk
> only to the 4.2 dc?   --  It looks like you can force -S servername
> on net ads join. Will that stay, though?

If your issue is FreeRADIUS, then presumably you are using MSCHAPv2,
and it is the first item in the WHATSNEW:

https://www.samba.org/samba/history/samba-4.5.0.html

Setting 'ntlm auth = yes' should help.

Andrew Bartlett

-- 
Andrew Bartlett                      http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


   


More information about the samba mailing list