23 Apr
2021
23 Apr
'21
6:29 a.m.
On 23/04/2021 11:20, Alan DeKok wrote:
On Apr 23, 2021, at 2:18 AM, <275972560@qq.com> <275972560@qq.com> wrote:
I want to say that was my expecting answer, but per talking with my colleague, he said that the mschap challenge auth can be somehow proxy or transfer from supplicant to MS AD by radius, just the like the trick of ldap bind auth itself, this is what I'm curious about, is this even operational?
If he knows the answer already, why are you asking me? Go ask him how he does it.
Sounds like he's probably running a Microsoft RADIUS server in Windows, and proxying over to that to do the auth. Which isn't FreeRADIUS authenticating against AD. It's just proxying to another RADIUS server that is. -- Matthew