Freeradius & active directory

Applications IP Networking
1

Hello,

I am trying to authenticate through PEAP/mschap with freeradius 2.x and Active Directory.

I have followed this guide: Deploying RADIUS: Configuring Authentication with Active Directory

wbinfo works:

[root@radiustest raddb]# wbinfo -a LOGIN%PASSWORD
plaintext password authentication failed
Could not authenticate user LOGIN%PASSWORD with plaintext password
challenge/response password authentication succeeded

so the challenge/response works.

but when i try with freeradius:

[root@radiustest ~]# radtest LOGIN PASSWORD localhost:1645 1645 testing123

i get:

Found Auth-Type = ntlm_auth
+- entering group authenticate {...}
        expand: --username=%{mschap:User-Name} -> --username=LOGIN
        expand: --password=%{User-Password} -> --password=PASSWORD
Exec-Program output: NT_STATUS_NO_SUCH_USER: No such user (0xc0000064)
Exec-Program-Wait: plaintext: NT_STATUS_NO_SUCH_USER: No such user (0xc0000064)
Exec-Program: returned: 1
++[ntlm_auth] returns reject

it seems he doesnt try the challenge/response auth...

anyone can help me ? thx