PacketFence - BTS - PacketFence
View Issue Details
0001318PacketFenceupstreampublic2011-10-21 13:252012-10-24 09:53
fgaudreault 
fgaudreault 
lowminorsometimes
resolvedfixed 
 
 
0001318: 802.1X Machine Authentication won't work with Samba 3.6
This is a tracking ticket for the upstream issue about Samba 3.6.

Full details are here:
https://lists.samba.org/archive/samba/2011-September/163991.html [^]
You will have this output in radiusd -X :
[mschapv2] +- entering group MS-CHAP {...}
[mschap] Creating challenge hash with username: host/cadm-spare5.csdesiles.qc.ca
[mschap] Told to do MS-CHAPv2 for host/cadm-spare5.csdesiles.qc.ca with NT-Password
[mschap] expand: --username=%{mschap:User-Name} -> --username=cadm-spare5$
[mschap] mschap2: c8
[mschap] Creating challenge hash with username: host/cadm-spare5.csdesiles.qc.ca
[mschap] expand: --challenge=%{mschap:Challenge:-00} -> --challenge=6cf0087e16755e14
[mschap] expand: --nt-response=%{mschap:NT-Response:-00} -> --nt-response=cbbd1ed99417f0399e7e3d7bd07212e5314170a8f86fe631
Exec-Program output: No logon workstation trust account (0xc0000199)
Exec-Program-Wait: plaintext: No logon workstation trust account (0xc0000199)
Exec-Program: returned: 1
[mschap] External script failed.
[mschap] FAILED: MS-CHAP2-Response is incorrect
No tags attached.
Issue History
2011-10-21 13:25fgaudreaultNew Issue
2012-10-19 12:45fgaudreaultTarget Version => investigate
2012-10-19 12:45fgaudreaultNote Added: 0003158
2012-10-24 09:53fgaudreaultNote Added: 0003233
2012-10-24 09:53fgaudreaultStatusnew => resolved
2012-10-24 09:53fgaudreaultResolutionopen => fixed
2012-10-24 09:53fgaudreaultAssigned To => fgaudreault
2012-10-24 09:53fgaudreaultTarget Versioninvestigate =>

Notes
(0003158)
fgaudreault   
2012-10-19 12:45   
We should see if it's fixed upstream.
(0003233)
fgaudreault   
2012-10-24 09:53   
Fixed upstream. I cannot reproduce with the latest samba 3.6 packages.

Use Samba 3.6.8 or later.