10 Oct
2005
10 Oct
'05
6:28 p.m.
Michael Schwartzkopff <misch@multinet.de> wrote:
Forget M$. Windooze is not able to do authentication BEFORE logon. Only after logon the possibilty to authenticate to the network exists. So much to the logic of M$.
Apparently Samba 3.0.21 will contain patches to ntlm_auth that allow it to do machine authentication for PEAP sessions. I haven't tried it myself, but it might work. I *do* know that using EAP-TLS for machine authentication works, once the magic "extended attribute" is added. See "scripts/xpextensions" in the current CVS snapshots. Alan DeKok.