Hi Andrew,

I'm in the process of writing up a wiki article on how to debug the SSP. When that's there, debug logging will help us figure out what's going on.

Until then, a couple of quickies - are you mapping to a user in AD? If so, I don't think the direct user mappings work - I think (but could be wrong) that that's only for local machines. Instad, you need to edit the account that you wish to map to. Add a value of "EAP:NAI" (e.g. EAP:[log in to unmask]) to the altSecurityIdentities attribute of that account.

Re the Interactive login process failing thing - is this 32 or 64 bit windows you're using? We've had a couple of issues with the 32 bit build which display these symptoms which I think we thought we'd fixed. Never seen it on 64 bit yet though...

Rhys.



On 7 Jun 2013, at 15:19, "Bailey, Andrew James - baiaj007" <[log in to unmask]> wrote:

> Hi everyone,
> 
> Since this email we have joined the pilot and installed the windows libraries which we have confirmed are correctly sending credentials to our RADIUS server and receiving confirmation back that they are correct however the SMB/CIFS connection is not working correctly.
> 
> <Error on client when uninet account is NAI.jpg>
> On the client we are receiving the error above and I believe it is to do with the User Mappings as like I mentioned, the RADIUS authentication is going through and the error message changes when I swap the accounts in the User Mapping. If it will assist we also captured the packets while this error occurred.
> <Moonshot Config - uninet account as NAI - censored IP.jpg>
> 
> We are also having issues on login where sometimes rather than providing the login screen the error below will be displayed and then the server will restart.
> <Interactive Login Error.jpg>
> 
> Can anyone assist with either of these issues?
> 
> Thanks,
> 
> Andrew Bailey
> University of South Australia
> 
> 
> On 13 May 2013 17:27, Bailey, Andrew James - baiaj007 <[log in to unmask]> wrote:
> Hi Rhys,
> 
> Thanks for you quick reply! Apologies for my slow one!
> Having spoken with our management we would prefer not to join the pilot and therefore I understand if we can not be provided with the Windows libraries/information however we would love to receive them and assist with testing and provide feedback if that is possible. Assuming it is not possible as we are interested in file sharing in general at the moment as such has any work been put in to enabling NFS/CIFS shares from Linux to Linux, specifically using the Debian Moonshot live DVD distribution? There was a thread a few weeks ago but it was based on a custom NFS implementation but we want to stay as vanilla as possible. I also came across http://www.project-moonshot.org/devwiki/testing/nfsv4/ but we have not had any success.
> 
> In future we would also be looking at further services but we are solely file sharing focussed at the moment.
> 
> Windows XP would be preferred as we need to support a wide range of users from multiple institutions eventually. Our institution is moving to Windows 7 but we can not guarantee our remote users have done so.
> 
> We are also trying to remove the RadSec requirement as our AAA providers have not yet implemented RadSec  We have been working on implementing radsecproxy but have not yet been successful. Is that something Janet is looking at supporting? Otherwise has anyone successfully proxied/removed the requirement for RadSec?
> 
> Regards,
> 
> Andrew Bailey
> University of South Australia
> 
> 
> On 3 May 2013 01:39, Rhys Smith <[log in to unmask]> wrote:
> Hi Andrew,
> 
> I'll be starting to put up instructions for installing on the windows side of things either tomorrow or early next week. If you check out https://community.ja.net/groups/moonshot/wiki/start-here the windows pages should soon start filling with content…
> 
> The Windows libraries themselves are not going to be freely available to the world at large yet, but are making them available to members of our service pilot and potentially other education-related sites. If you'd like to join our pilot then we can certainly distribute it to you; if not then we may well be able to do something anyway.
> 
> What services on windows are you planning on testing this with? Would this be pure file server duties over CIFS?
> 
> Also, I can't remember offhand how far back in terms of windows versions we support - not sure if XP as a client is going to work or not. It might be Vista onwards.
> 
> Best,
> Rhys.
> --
> Dr Rhys Smith
> Identity, Access, and Middleware Specialist
> Cardiff University & Janet - the UK's research and education network
> 
> email: [log in to unmask] / [log in to unmask]
> GPG: 0xDE2F024C
> 
> 
> 
> On 2 May 2013, at 14:22, "Bailey, Andrew James - baiaj007" <[log in to unmask]> wrote:
> 
> > Hi,
> >
> > We are currently attempting to implement a prototype of Moonshot for file server access and authentication. We have it functioning as per the live DVD instructions but would like to step beyond that and start testing it with a Windows 2008R2 server and Windows XP client. Are those libraries available as yet?
> >
> > Thanks,
> >
> > Andrew Bailey
> > University of South Australia
> 
> 
> 
> 
>