Re: Captive portal: can I use chap or pap in conjunction with ntlm_auth?
Is there a way for me to use pap with users stored in Active Directory?
Yes. If you followed AD integration document you have already done that. Now, the best way to integrate that with accounts stored elsewhere (files, sql, ldap, etc.) is to create failover after pap in authorize section of default virtual server (instead of forcing it in users file):
if(!Auth-Type) { update control { Auth-Type = "ntlm_auth" } }
Awesome. Thank you that worked like a charm! John
Is there a way for me to use pap with users stored in Active Directory?
Yes. If you followed AD integration document you have already done that. Now, the best way to integrate that with accounts stored elsewhere (files, sql, ldap, etc.) is to create failover after pap in authorize section of default virtual server (instead of forcing it in users file):
if(!Auth-Type) { update control { Auth-Type = "ntlm_auth" } }
Awesome. Thank you that worked like a charm!
It should be if(!control:Auth-Type). I have added the guide for combining AD accounts with accounts stored elsewhere to freeradius wiki: http://wiki.freeradius.org/Combining_authentication_of_AD_accounts_%28ntlm_a... Ivan Kalik Kalik Informatika ISP
participants (2)
-
Ivan Kalik -
john