Re: AD/Samba and machine account auth...

On 19/07/2021 16:02, Marco Gaiarin wrote:

Debian stretch, freeradius 3.0.12+dfsg-5+deb9u1 and samba 2:4.10.18+dfsg-0.1stretch1, using the bultin winbind library.

I'm not in a multidomain forest, so i've simply fix with an:

winbind_username = "%{%{mschap:User-Name}:-None}" winbind_domain = "LNFFVG"

And in this way machne and user account works as expected; but i think/hope that there's a better fix.

Try 3.0.23. There was a recent update to how '%{mschap...}' is handled. http://packages.networkradius.com/ -- Matthew