Re: EAP-TTLS (PAP) not working with NT domain - debian freeradius 1.1.7

James McOrmond wrote:

As per previous emails, since i'm using samba/ldap i'm able to pull the nt/lmpassword fields directly out of the ldap. Should this method negate the use of the ntlm_auth method?

Yes. See ldap.attrmap. The LDAP module uses this to map LDAP attributes to RADIUS attributes. Once FreeRADIUS has an NT hash, it can authenticate users. Alan DeKok.