Let me clarify. Here is my setup: SSL-VPN client -> Cisco VPN Concentrator -> FreeRadius -> W2K Active Directory It seems all the docs on the 'Net I have found talk about wireless or 802.1x clients. I think I should be using ntlm_auth. Or should I be using the LDAP module? Thanks, Alhagie Puye - Network Engineer Datawave Group of Companies (604)295-1817

...

-----Original Message----- From: freeradius-users-bounces@lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of Alan DeKok Sent: November 24, 2005 7:40 AM To: FreeRadius users mailing list Subject: Re: Freeradius How to integrate Active Directory [AD IntegrationWindowsXP NTLM Tutorial]

"Alhagie Puye" <APuye@datawave.com> wrote:

...

I have followed the steps in the howto and everything seems to work fine but FreeRADIUS is ignoring "MS-CHAP".

Debug logs?

...

My question is...can I use Active Directory if I need to use attribute 25 on FreeRADIUS?

What's attribute 25?

...

If so, how do I make sure that FreeRADIUS uses on MS-CHAP for an authentication method?

You don't. The client chooses the authentication method.

Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Disclaimer: This message (including any attachments) is confidential, may be privileged and is only intended for the person to whom it is addressed. If you have received it by mistake please notify the sender by return e-mail and delete this message from your system. Any unauthorized use or dissemination of this message in whole or in part is strictly prohibited. E-mail communications are inherently vulnerable to interception by unauthorized parties and are susceptible to change. We will use alternate communication means upon request.