Thanks for replying.. If I understand correctly, firstly I have to use Samba and join the AD, and after that use ntlm_auth for user authentication, right? Thank you for your time. On Mon, 24 May 2021 at 15:04, Alan DeKok <aland@deployingradius.com> wrote:
On May 24, 2021, at 7:58 AM, Vertigo Altair <vertigo.altair@gmail.com> wrote:
I'm trying to use FreeRADIUS with an Active Directory Server. I've read
the
documentations but the server that FreeRADIUS runs has to join the Active Directory as a client.
Is there any way to authenticate users with AD without joining the AD server?
No.
P.S.: I'm using MSCHAP protocol.
Doubly no.
If FreeRADIUS gets User-Password, then it can just do an LDAP "bind as user" to Active Directory.
But for MS-CHAP, it is *required* to use Samba.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html