Using ntlm and MS-CHAP authentication on the same server

Alan DeKok aland at
Wed May 17 17:36:40 CEST 2006

Bugneac Constantin <bugneac at> wrote:
> I would like know if it is possible to configure the Freeradius
> to do authentication based on ntlm for one group of users
> and MS-Chap for other on the same server.

  Yes.  You can configure ntlm_auth as normal, and then for users with
passwords, do something like:

user	   User-Password := "password", MS-CHAP-Use-NTLM-Auth = No

> The problem is that I do not want users from one group to
> get logging in sistem using credintials from other.

  You can configure it for groups, too:

DEFAULT	   Group == "no-ntlm-auth", MS-CHAP-Use-NTLM-Auth = No

  Alan DeKok.

More information about the Freeradius-Users mailing list