Re: FreeRADIUS Authentication with AD Without Joining AD

On May 24, 2021, at 7:58 AM, Vertigo Altair <vertigo.altair@gmail.com> wrote:

I'm trying to use FreeRADIUS with an Active Directory Server. I've read the documentations but the server that FreeRADIUS runs has to join the Active Directory as a client.

Is there any way to authenticate users with AD without joining the AD server?

No.

P.S.: I'm using MSCHAP protocol.

Doubly no. If FreeRADIUS gets User-Password, then it can just do an LDAP "bind as user" to Active Directory. But for MS-CHAP, it is *required* to use Samba. Alan DeKok.