8 Jun
2017
8 Jun
'17
10:08 a.m.
On Jun 8, 2017, at 10:01 AM, Arnab Roy <arnabroy@mail.com> wrote:
Just been sent back from the samba lists to here...:))) they are saying to use ldaps instead?
You didn't ask the right question. Active Directory does not allow FreeRADIUS to query the user's password via LDAP, or LDAPS. FreeRADIUS has MS-CHAP authentication data, and needs to be able to ask Active Directory "is this OK?" The ONLY way to do this is via ntlm_auth. Alan DeKok.