14 Nov
2024
14 Nov
'24
1:09 p.m.
On Nov 14, 2024, at 12:25 PM, Rodrigo Antunes via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
Hi, I'd like to authenticate a PC using it's machine account and the mschap module, without calling ntlm_auth, is this possible?
It depends. If all of the passwords are in Active Directory, then you have to use ntlm_auth.
I noticed that the machine send its user as "host/machinename" but I don't know how to obtain and check its password.
You should be able to just check the machine credentials. Try it with ntlm_auth. It's a command-line tool that can be used on its own.
Maybe I should check the nt-hashes in users file?
You will need the correct password, and then store that in the "users" file. Alan DeKok.