Any way for ntlm_auth + winbind to not use ms-chap?

[Matthew Newton]

On Thu, Jun 16, 2016 at 02:49:52PM -0700, Mike Ely wrote:
> On 06/16/2016 02:36 PM, Matthew Newton wrote:
> >On Thu, Jun 16, 2016 at 11:51:09AM -0700, Mike Ely wrote:
> >Not sure the question makes much sense. If you're doing MSCHAP
> >then there is a challenge/response by definition.
> I guess to simplify the question: is it absolutely essential to use MSCHAP
> when authenticating against winbind, or can a simpler mechanism be used?

See mods-available/ntlm_auth. You can send a username and password directly.

(If you're living on the bleeding edge, see rlm_winbind in v3.1.x
that I committed a week or two ago).

Does that help?

Matthew


-- 
Matthew Newton, Ph.D. <mcn4 at le.ac.uk>

Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253, <ithelp at le.ac.uk>