On Thu, Feb 25, 2016 at 1:24 PM, <A.L.M.Buxey@lboro.ac.uk> wrote:
Hi,
use the winbind connection pool (upgrade to samba 4.2.x or 4.3.x) toavoid using ntlm_auth and the legacy winbind method
I am thinking freeradius will authenticate MSCHAPv2 faster if it gets the NT-password from LDAP, as with winbind it needs to communicate with the domain controllers. In our configuration freeradius already connects with LDAP to get the userPassword (and groups for authorization), so it seems easier to take the nt-password too. Am I wrong guessing this solution will be faster authenticating mschapv2? Again, thank you so much for your help. Regards, *Oscar Remírez de Ganuza Satrústegui* IT Services Universidad de Navarra Tel. +34 948425600 x803130 http://www.unav.edu/web/it/