Hi thanks for your reply. I followed a couple of tutorials but they don´t work for me. Do you know a good one? I don´t want to use VLANs at this point. I have a question for the FreeRadius/proxy.conf what sould it look like? realm DOMAINNAME { authhost = DomainControler.OBLAN.LOCAL:1600 accthost = DomainControler.OBLAN.LOCAL:1601 secret = testing123 } BTW: the Domain is named oblan.local does this cause a problem? I will use the company certs later. Another question: I have deactivated the service RAS&Routing on the DC. I that necessary for freeRADIUS? -- Mit freundlichem Gruß Nicolas Fischer Hi Nicolas, I browsed a little of your error and your conf files to notice you are still missing a LOT of bits of a standard freeradius configuration to connect to an AD. mschap encryptition strength, configuration of EAP tunnels and protocols, actual domain not defined in FreeRadius/proxy.conf, and then not yet VLANs (ok, not probably at this time of the game, but you eventually will get there). You would better search and use in freeradius and Janet for tutorials about configuring RADIUS for AD. It is not as simples as tweaking the config files. About the certificates, I hope you dont use the current ones in production, as you just published them to the world at large. One last note, 2.1.12 FreeRadius has serious bugs working with AD (it works, but crashes a lot). I would recommend at least 2.2.5 or going directly to version 3.x. Regards, Rui Ribeiro Message: 2 Date: Wed, 13 Aug 2014 10:58:31 +0200 From: nfischer@hush.com To: freeradius-users@lists.freeradius.org Subject: freeRADIUS -> AD Auth (Router->FreeRADIUS runs. The Ubuntu Server is in the Domain, wbinfo -u gives me all Users. The auth via NTLM_AUTH runns too: /etc/freeradius$ ntlm_auth --request-nt-key --domain=DOMAINNAME --username=USERNAME Password: NT_STATUS_OK: Success (0x0) I think just FreeRADIUS is configured wrong. The auth fails, respectively does not take place. I put the config files and the freeradius -X output in the attachment. (I removed a few unimportant configfiles to not hit the 100kb limit of this mailinglist.) Many thanks in advance!