RESUELTO Ayuda con un freeradius atacando a un active directory

Estoy desesperado, consigo que me encuentre al usuario y me devuelva "ok" pero igualmente me da un access rejected [buuuaaaa]


esta es la salida de la peticion por debug: (nota: es un dominio de pruebas y no me importa q se vea el password de admin por aqui)
rad_recv: Access-Request packet from host 192.168.188.1 port 54744, id=13, length=53
        User-Name = "ADMINISTRADOR"
        User-Password = "win.dc"
Sun Apr 10 13:10:23 2011 : Info: +- entering group authorize {...}
Sun Apr 10 13:10:23 2011 : Info: ++[preprocess] returns ok
Sun Apr 10 13:10:23 2011 : Info: ++[chap] returns noop
Sun Apr 10 13:10:23 2011 : Info: ++[mschap] returns noop
Sun Apr 10 13:10:23 2011 : Info: [suffix] No '@' in User-Name = "ADMINISTRADOR", looking up realm NULL
Sun Apr 10 13:10:23 2011 : Info: [suffix] No such realm "NULL"
Sun Apr 10 13:10:23 2011 : Info: ++[suffix] returns noop
Sun Apr 10 13:10:23 2011 : Info: [ntdomain] No '\' in User-Name = "ADMINISTRADOR", looking up realm NULL
Sun Apr 10 13:10:23 2011 : Info: [ntdomain] No such realm "NULL"
Sun Apr 10 13:10:23 2011 : Info: ++[ntdomain] returns noop
Sun Apr 10 13:10:23 2011 : Info: [eap] No EAP-Message, not doing EAP
Sun Apr 10 13:10:23 2011 : Info: ++[eap] returns noop
Sun Apr 10 13:10:23 2011 : Info: ++[unix] returns notfound
Sun Apr 10 13:10:23 2011 : Info: ++[files] returns noop
Sun Apr 10 13:10:23 2011 : Info: [ntlm_auth]    expand: --username=%{mschap:User-Name} -> --username=ADMINISTRADOR
Sun Apr 10 13:10:23 2011 : Info: [ntlm_auth]    expand: --password=%{User-Password} -> --password=win.dc
Sun Apr 10 13:10:23 2011 : Debug: Exec-Program output: NT_STATUS_OK: Success (0x0)
Sun Apr 10 13:10:23 2011 : Debug: Exec-Program-Wait: plaintext: NT_STATUS_OK: Success (0x0)
Sun Apr 10 13:10:23 2011 : Debug: Exec-Program: returned: 0
Sun Apr 10 13:10:23 2011 : Info: ++[ntlm_auth] returns ok
Sun Apr 10 13:10:23 2011 : Info: ++[expiration] returns noop
Sun Apr 10 13:10:23 2011 : Info: ++[logintime] returns noop
Sun Apr 10 13:10:23 2011 : Info: [pap] WARNING! No "known good" password found for the user.  Authentication may fail because of this.
Sun Apr 10 13:10:23 2011 : Info: ++[pap] returns noop
Sun Apr 10 13:10:23 2011 : Info: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user
Sun Apr 10 13:10:23 2011 : Info: Failed to authenticate the user.
Sun Apr 10 13:10:23 2011 : Info: Using Post-Auth-Type Reject
Sun Apr 10 13:10:23 2011 : Info: +- entering group REJECT {...}
Sun Apr 10 13:10:23 2011 : Info: [attr_filter.access_reject]    expand: %{User-Name} -> ADMINISTRADOR
Sun Apr 10 13:10:23 2011 : Debug:  attr_filter: Matched entry DEFAULT at line 11
Sun Apr 10 13:10:23 2011 : Info: ++[attr_filter.access_reject] returns updated
Sun Apr 10 13:10:23 2011 : Info: Delaying reject of request 0 for 1 seconds
Sun Apr 10 13:10:23 2011 : Debug: Going to the next request
Sun Apr 10 13:10:23 2011 : Debug: Waking up in 0.9 seconds.
Sun Apr 10 13:10:24 2011 : Info: Sending delayed reject for request 0
Sending Access-Reject of id 13 to 192.168.188.1 port 54744



como podeis ver me da un
Info: ++[ntlm_auth] returns ok


pero igualmente me lo cataloga como
Info: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user


y ya no se que hacer mas =(

Me podeis echar una mano?








EDIT: solucionado añadiendo
DEFAULT     Auth-Type = ntlm_auth


al archivo users
0 respuestas