Hi, I am using FR 3.0.13 for eduroam (setting VLAN dynamically, auth is EAP-TTLS/PAP using LDAP). It works very well. Now I am planning to set up wifi access for a couple of dozens of Win 10 laptops. I would like to achieve the following: - automatic machine auth (no user intervention) - only these machines should be able to access the VLAN that is designated for them If possible, I want to have more security than just checking MAC addresses. I know you can do that with AD, however I don't have that. Is it possible and do you recommend to do this kind of thing using samba? I appreciate if you send me tips or point me to good descriptions. Yours: Laszlo
you can do machine auth with FR against an AD - use ntlm_auth - its pretty well documented - you are just using AD credentials (machine ones instead of user ones) alan
On 05/16/2018 07:34 PM, Alan Buxey wrote:
you can do machine auth with FR against an AD - use ntlm_auth - its pretty well documented - you are just using AD credentials (machine ones instead of user ones)
Yes, I've read that. But is it ok/recommended to use samba for this instead of a real AD? Yours: Laszlo
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Alan Buxey -
Alan DeKok -
Tornóci László