Proxy of Computer Authentication
I have a freeradius server setup that back-ends to LDAP which works perfectly for every device and user configuration I have come across. Until now.... I am now looking for a way to authentication XP workstation using Microsofts "Authenticate as Computer when ... whatever" and from what I have read and seen myself, this is just complete and udder voodoo. So rather then reinvent the wheel, I want to just proxy these request to a Microsoft IAS server and be done with it. But of course it is not working.... Has anyone had experience with this? Or offer any tips? Any other ideas? Thanks Bob -- View this message in context: http://www.nabble.com/Proxy-of-Computer-Authentication-tp25403574p25403574.h... Sent from the FreeRadius - User mailing list archive at Nabble.com.
Hi,
I have a freeradius server setup that back-ends to LDAP which works perfectly for every device and user configuration I have come across. Until now....
I am now looking for a way to authentication XP workstation using Microsofts "Authenticate as Computer when ... whatever" and from what I have read and seen myself, this is just complete and udder voodoo.
this will come to use as a host/ entry - so you need to check if the user name begins with host/ and, if so, set proxy-to-realm and proxy it off to IAS .... or, you can get FreeRADIUS to deal with it just as good - you'll need to use the mschap module, bind your FR box into the AD and configure the ntlm_auth appropriately. we deal with thousands of machine authentications with our FR boxes radiusd -X will help us to help you alan
participants (2)
-
Alan Buxey -
robert_w_brandt