hi: after some trying, the workable keyword is "MS-CHAP-Use-NTLM-Auth := 0". i found that in the list archive. maybe someone will read this thread someday, so put the corrections here. thanks for ur help!! Best regards, tbsky

tbsky@annsky.us wrote:

...

if freeradius can use both "ntlm_auth" and "users" file to authticate users, then everything is streight-forward.

For guests, put the following in the "users" file:

name User-Password := "password", Use-NTLM-Auth := No

And set up ntlm_auth for employees. It will work.

Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html