12 Feb
2025
12 Feb
'25
9:59 a.m.
Le 12/02/2025 à 13:08, Alan DeKok a écrit :
Using LDAP is simpler, faster, and has fewer intermediate pieces. You can:
a) use an existing LDAP connection to check PAP passwords
b) fork ntlm_auth which connects over a socket to winbind which connects to Samba which uses 1990s NT protocols to talk to Active Directory.
Which one is faster and is less likely to fail?
OK. LDAP is better. In that case, as Freeradius and Samba-AD are on the same machine, wouldn't it be possible to also use LDAP for mschap? Do you have a guide to configure LDAP for PAP in Freeradius please?