0001318: 802.1X Machine Authentication won't work with Samba 3.6 - PacketFence

Bug Tracking System

View Issue Details [ Jump to Notes ]

[ Issue History ] [ Print ]

Project

Category

View Status

Date Submitted

Last Update

0001318

PacketFence

upstream

public

2011-10-21 13:25

2012-10-24 09:53

Reporter

fgaudreault

Assigned To

fgaudreault

Priority

low

Severity

minor

Reproducibility

sometimes

Status

resolved

Resolution

fixed

Platform

OS Version

Product Version

Target Version

Fixed in Version

Summary

0001318: 802.1X Machine Authentication won't work with Samba 3.6

Description

This is a tracking ticket for the upstream issue about Samba 3.6.

Full details are here:
https://lists.samba.org/archive/samba/2011-September/163991.html [^]

Additional Information

You will have this output in radiusd -X :
[mschapv2] +- entering group MS-CHAP {...}
[mschap] Creating challenge hash with username: host/cadm-spare5.csdesiles.qc.ca
[mschap] Told to do MS-CHAPv2 for host/cadm-spare5.csdesiles.qc.ca with NT-Password
[mschap] expand: --username=%{mschap:User-Name} -> --username=cadm-spare5$
[mschap] mschap2: c8
[mschap] Creating challenge hash with username: host/cadm-spare5.csdesiles.qc.ca
[mschap] expand: --challenge=%{mschap:Challenge:-00} -> --challenge=6cf0087e16755e14
[mschap] expand: --nt-response=%{mschap:NT-Response:-00} -> --nt-response=cbbd1ed99417f0399e7e3d7bd07212e5314170a8f86fe631
Exec-Program output: No logon workstation trust account (0xc0000199)
Exec-Program-Wait: plaintext: No logon workstation trust account (0xc0000199)
Exec-Program: returned: 1
[mschap] External script failed.
[mschap] FAILED: MS-CHAP2-Response is incorrect

Tags

No tags attached.

fixed in git revision

fixed in mtn revision

Attached Files

Relationships

Notes
(0003158) fgaudreault (viewer) 2012-10-19 12:45	We should see if it's fixed upstream.

(0003233) fgaudreault (viewer) 2012-10-24 09:53	Fixed upstream. I cannot reproduce with the latest samba 3.6 packages. Use Samba 3.6.8 or later.

Issue History
Date Modified	Username	Field	Change
2011-10-21 13:25	fgaudreault	New Issue
2012-10-19 12:45	fgaudreault	Target Version	=> investigate
2012-10-19 12:45	fgaudreault	Note Added: 0003158
2012-10-24 09:53	fgaudreault	Note Added: 0003233
2012-10-24 09:53	fgaudreault	Status	new => resolved
2012-10-24 09:53	fgaudreault	Resolution	open => fixed
2012-10-24 09:53	fgaudreault	Assigned To	=> fgaudreault
2012-10-24 09:53	fgaudreault	Target Version	investigate =>