Using ntlm and MS-CHAP authentication on the same server
Hi to all, I would like know if it is possible to configure the Freeradius to do authentication based on ntlm for one group of users and MS-Chap for other on the same server. In my configuration I use one radius server for controling access to wireless network and dial-up network. The problem is that I do not want users from one group to get logging in sistem using credintials from other. Does anyone any ideas? Constantin Bugneac Network Designer & Administrator Department of Informational Development MD2012, Chisinau, Moldova Republic Of str.Puskin 42 tel. (+373 22) 504-455
Bugneac Constantin <bugneac@registru.md> wrote:
I would like know if it is possible to configure the Freeradius to do authentication based on ntlm for one group of users and MS-Chap for other on the same server.
Yes. You can configure ntlm_auth as normal, and then for users with passwords, do something like: user User-Password := "password", MS-CHAP-Use-NTLM-Auth = No ...
The problem is that I do not want users from one group to get logging in sistem using credintials from other.
You can configure it for groups, too: DEFAULT Group == "no-ntlm-auth", MS-CHAP-Use-NTLM-Auth = No ... Alan DeKok.
participants (2)
-
Alan DeKok -
Bugneac Constantin