Re: Authorize with SQL and not authenticate

On Jul 4, 2018, at 12:22 PM, Tom Yard <tomyyard@gmail.com> wrote:

Now I have NTLM _AUTH with MSCHAP in Freeradius, and I can see I have enabled PAP autheentication and authorization too (in default and inner-tunnel files).

That's enabled in the default config.

Please can you tell me where I have to force PAP from the user side

Configure the user side. There is *no* negotiation of PAP vs MS-CHAP in RADIUS.

in ordr to just authorize the hosts? Users are logged into a host and after that the switch sends the MAC Address' host to the Freeradius server.

Configure the switch to do MAC address authentication. See the switch documentation for details. Alan DeKok.