do you REALLY want to accept what the >user puts in as the gospel truth? ie, I >wouldnt be comfirtable taking the user-supplied domain for the >ntlm_auth - I'd set it manually (if it really >was a local user!)
Good point. Our existing setup uses IAS, and is configured to expect the domain to be appended. I want to switch to FreeRADIUS without too many changed being required client side - possibly even none if I moved the cert from the IAS box to the FreeRADIUS machine. Cheers, Mark On 8 Oct 2010, at 14:59, Alan Buxey <A.L.M.Buxey@lboro.ac.uk<mailto:A.L.M.Buxey@lboro.ac.uk>> wrote: do you REALLY want to accept what the user puts in as the gospel truth? ie, I wouldnt be comfirtable taking the user-supplied domain for the ntlm_auth - I'd set it manually (if it really was a local user!)