Re: Another LDAP/MSCHAPv2 problem
Hmmm. Don't update user-name. Set or update stripped-user-name instead and use that in the mschap auth actually I'm sure by default the system understands these user names so as long as you use %{mschap:user-name} you'll be using the correct value in that place.... we do machine auth to multiple AD backends with none of this hassle....which is why we use FR. alan
On 02/10/2012 05:46 PM, Alan Buxey wrote:
Hmmm.
Don't update user-name. Set or update stripped-user-name instead and use that in the mschap auth
The mschap module doesn't honour Stripped-User-Name anywhere. The only place it would work would be in the ntlm_auth command line xlat, and he's not using that - he's running Samba as a domain controller w/ LDAP backend, and trying to auth against the password hashes in LDAP directly.
participants (2)
-
Alan Buxey -
Phil Mayers