Freeradius and Active directory

[Alan DeKok]

Tomáš Janeček wrote:
> I would like to authenticate my Windows XP wireless clients against
> Active Directory server via Freeradius.
,,,
> What doesn't work:
> When I try to bind phase 1.) and 2.) (ie. send request from winXP to
> radius and let radius to authenticate against AD), it returns:
> 
> **********************************************************************
> rad_recv: Access-Request packet from host 1.2.3.4:1224, id=1, length=59
>         User-Name = "MYNTDOMAIN\\user"
>         CHAP-Password = 0x6036fd239ead000176def7ade553072c87

  It is impossible to use CHAP to authenticate to AD.  You MUST use
MS-CHAP, or PAP.

  Alan DeKok.