Re: best practice for combination freeradius -- active directory?

"ho" <nospam@berwicke.de> wrote:

- has anybody implemented a similar system?

Yes.

- what could be a alternative/better way to make a connection between freeradius and the AD-Servers only for password-authentication?

ntlm_auth. See "radiusd.conf"

- I've heard from our AD-God's ;-) that kerberos is used in the = AD-system and that it could be a way?

If you're doing MS-CHAP or wireless, no. Alan DeKok.