*** empty log message ***

[ppp.git] / README.MSCHAP80

diff --git a/README.MSCHAP80 b/README.MSCHAP80
index 95f01ea8982885df687b07bf23dd5c8635935db1..b0d54cbecd2bb26915f8c93c2c18b0e85d675c71 100644 (file)
--- a/README.MSCHAP80
+++ b/README.MSCHAP80
@@ -3,6 +3,7 @@ PPP Client Support for Microsoft's CHAP-80
 
 Eric Rosenquist          rosenqui@strataware.com
 (updated by Paul Mackerras)
+(updated by Al Longyear)
 
 INTRODUCTION
 
@@ -114,6 +115,33 @@ The "remotename" option is required for MS-CHAP since Microsoft PPP servers
 don't send their system name in the CHAP challenge packet.
 
 
+E=691 (AUTHENTICATION_FAILURE) ERRORS WHEN YOU HAVE THE VALID SECRET (PASSWORD)
+
+If your RAS server is not the domain controller and is not a 'stand-alone'
+server then it must make a query to the domain controller for your domain.
+
+You need to specify the domain name with the user name when you attempt to
+use this type of a configuration. The domain name is specified with the
+local name in the chap-secrets file and with the option for the 'name'
+parameter.
+
+For example, the previous example would become:
+
+    DialupNT            domain\\customer47   foobar
+    domain\\customer47  DialupNT             foobar
+
+and
+
+    pppd name 'domain\\customer47' remotename DialupNT <other options>
+
+or add:
+
+    name domain\\customer47
+    remotename DialupNT
+
+when the Windows NT domain name is simply called 'domain'.
+
+
 TROUBLESHOOTING
 
 Assuming that everything else has been configured correctly for PPP and