AD/Samba and machine account auth...

[Matthew Newton]

On 19/07/2021 16:02, Marco Gaiarin wrote:
> 
> Debian stretch, freeradius 3.0.12+dfsg-5+deb9u1 and samba
> 2:4.10.18+dfsg-0.1stretch1, using the bultin winbind library.
> 

> I'm not in a multidomain forest, so i've simply fix with an:
> 
> 	winbind_username = "%{%{mschap:User-Name}:-None}"
> 	winbind_domain = "LNFFVG"
> 
> And in this way machne and user account works as expected; but i
> think/hope that there's a better fix.

Try 3.0.23. There was a recent update to how '%{mschap...}' is handled.

http://packages.networkradius.com/


-- 
Matthew