Re: Freeradius and Active directory

Tomáš Janeček wrote:

I would like to authenticate my Windows XP wireless clients against Active Directory server via Freeradius. ,,, What doesn't work: When I try to bind phase 1.) and 2.) (ie. send request from winXP to radius and let radius to authenticate against AD), it returns:

********************************************************************** rad_recv: Access-Request packet from host 1.2.3.4:1224, id=1, length=59 User-Name = "MYNTDOMAIN\\user" CHAP-Password = 0x6036fd239ead000176def7ade553072c87

It is impossible to use CHAP to authenticate to AD. You MUST use MS-CHAP, or PAP. Alan DeKok.