Confusion between Freeradius + MSCHAPv2 + Samba
Hello, I have two machines. Freeradius + Samba as PDC. I auth. wlan clients against Radius and I want to store any user data on my Samba. The client auth, will be realized with PEAP+MSCHAPv2. So the problem is the bad thing with MSCHAPv2 and NTLMv1. So an other way could be kerberos and I read this howto http://deployingradius.com/documents/configuration/active_directory.html but is it usefull to use kerberos with two machines? I think it would be a contradiction of kerberos and would it work without AD/ldap? And could I use a sql database to save the encrypted passwords by using ntlm and the rlm_mschap module? Thanks! Andreas
Andreas Rudat wrote:
but is it usefull to use kerberos with two machines?
Most of the time: no.
I think it would be a contradiction of kerberos and would it work without AD/ldap?
I have no idea what that means.
And could I use a sql database to save the encrypted passwords by using ntlm and the rlm_mschap module?
You can use SQL to store anything, include NT-Passwords. Alan DeKok.
Am 21.09.2011 22:09, schrieb Alan DeKok:
Andreas Rudat wrote:
but is it usefull to use kerberos with two machines? Most of the time: no.
I think it would be a contradiction of kerberos and would it work without AD/ldap? I have no idea what that means.
And could I use a sql database to save the encrypted passwords by using ntlm and the rlm_mschap module? You can use SQL to store anything, include NT-Passwords.
Alan DeKok. - ok, thanks for the info.
Andreas
participants (2)
-
Alan DeKok -
Andreas Rudat