Problem with MSCHAP

[Mark Holmes]

>do you REALLY want to accept what the >user puts in as the gospel truth?  ie, I >wouldnt be comfirtable
taking the user-supplied domain for the >ntlm_auth - I'd set it manually (if it really >was a local user!)

Good point.

Our existing setup uses IAS, and is configured to expect the domain to be appended.  I want to switch to FreeRADIUS without too many changed being required client side - possibly even none if I moved the cert from the IAS box to the FreeRADIUS machine.

Cheers,

Mark


On 8 Oct 2010, at 14:59, Alan Buxey <A.L.M.Buxey at lboro.ac.uk<mailto:A.L.M.Buxey at lboro.ac.uk>> wrote:

do you REALLY want to accept what the user puts in as the gospel truth?  ie, I wouldnt be comfirtable
taking the user-supplied domain for the ntlm_auth - I'd set it manually (if it really was a local user!)