1 Oct
2007
1 Oct
'07
7:52 a.m.
On Mon, 2007-10-01 at 10:41 +0100, Marco Casulli wrote:
Touchy! :-)
Read this list for a while, then you'll see why people get irate when their advice isn't followed ;o)
I was only asking as I am not an expert on this subject and wanted to understand why Samba came in the loop?
In a domain environment, FreeRadius authenticates mschap by a callout to the Samba "ntlm_auth" program; this in turn makes an RPC call to the domain controller. In older versions of samba, the RPC call lacks the flag to say "machine accounts are acceptable here", so they fail authentication. In later versions, the flag is present.