OK, so the current problem seems to be that I cannot get the ntlm_auth to work. I read http://freeradius.1045715.n5.nabble.com/Freeradius-with-Active-Directory-td2... but that does not seem to apply for me as the ntlm_auth file contains the exec. Attached (if that works) is the radius -X output for the current working configuration (basic_configuration_run.txt). We are only doing mac-authentication now and depending on the mac-address, the device is placed in a certain VLAN. I unfortunately did not install the server myself but as far as I know FR was originally installed from the Debian package 2.1.8 and we recently upgraded to 2.1.10. Until a year ago I never really worked with (free)radius, linux or cisco switches and it still is just a small part of my daily work, so I probably make a lot of beginner mistakes. # -*- text -*- # # $Id$ # NTLM module # # To authenticate requests using AD. # exec ntlm_auth { wait = yes program = "/usr/bin/ntlm_auth --request-nt-key --domain=ALEO.LOCAL --username=%{mschap:User-Name} --password=%{User-Password}" } If I add ntlm_auth to the beginning of the users file I get an error /etc/freeradius/users[157]: Parse error (check) for entry DEFAULT: Unknown value ntlm_auth for attribute Auth-Type Errors reading /etc/freeradius/users If I add ntlm_auth to the authenticate section of the default virtual server I get an error /etc/freeradius/sites-enabled/default[254]: Failed to load module "ntlm_auth". /etc/freeradius/sites-enabled/default[217]: Errors parsing authenticate section. If I add ntlm_auth to the modules section of radiusd.conf I get a 'warning' /etc/freeradius/radiusd.conf[1840]: Failed to link to module 'rlm_ntlm_auth': file not found