Re: EAP and NTLM support (fwd)

On 11/24/2010 06:10 PM, JR Mayberry wrote:

http://technet.microsoft.com/en-us/library/dd560653(WS.10).aspx

microsoft appears to be making steps to kill NTLM as it isn't secure

It is important to distinguish between NTLM-the-wire-protocol, and ntlm_auth, the Samba helper binary, which actually calls a NetLogon RPC function call over an schannel-protected pipe (which may for example be encrypted using the Kerberos trust relationship between the Samba server and the domain controller) The former may (eventually) be deprecated, but FreeRadius/Samba/ntlm_auth don't use it. The latter is not going anywhere, I feel sure.