Thanks for your reply, Alan I've been reading some documentation and I guess I'm on the wrong path: I got everything working with winbind but, as far as I understood, this only works with SAM, and there's no (simple) way of doing UPN unless I switch to LDAP module, so I think I'll go down this path and see how it goes. Thanks! On Fri, 29 May 2020, 14:57 Alan DeKok, <aland@deployingradius.com> wrote:
On May 29, 2020, at 5:46 AM, R3DNano <r3dnano@gmail.com> wrote:
AFAIK, when I authenticate my users via ntlm_auth (samba AD bnind,
etc...,
not the LDAP module, as suggested by the docu), account names in SAM are used instead of UPN (please, correct me if I'm wrong)
You use whatever AD allows. See the AD documentation for how AD works.
Is it possible to use UPN instead?
Some people do. See the AD docs.
What drawbacks can we have if we do this?
The format of user names doesn't matter to FreeRADIUS. So the only issues are elsewhere.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html