Hi, I thought the whole meaning of binding a freeRadius to an Active Directory is that I have from now on just to configure Users in the AD. So every device I want to authenticate on asks the FR which then asks the AD. So the AD will answer if the User is valid and which Service-Type he has. On my AD Server I installed the Role NPS, configured a RADIUS-Client and some Network Policies. Maybe I am on the right way, maybe not... :-( The AD succesfully tells the FR if the user is valid, just that Service-Type is missing.
Martin
hi, as stated in the doc on deployingradius: "In this configuration, we are using Active Directory as an authentication oracle, and not as an LDAP database." So it seems that you will not get any attributes back from AD. If your NAS expects the Service-Type attribute you would have to add it on the fly from your FreeRADIUS configuration. Greetings, -- Dr. Michael Schwartzkopff Guardinistr. 63 81375 München Tel: (0163) 172 50 98 Fax: (089) 620 304 13