I'm trying to validate a user from two trusted NT4 domains. I cannot get ntlm_auth --username=domainb/domainbuser to work. How are you supposed to validate a user with domain credentials, when you can't pass along the domain information? I think it's more of a limitation with ntlm_auth than anything. tia, jamie
aland@ox.org 9/20/2005 11:45:49 AM >>> "Jamie Crawford" <crawford@cmsu1.cmsu.edu> wrote: When I run ntlm_auth --username=domainauser everything works great. When I run ntlm_auth --username=domainbuser it fails because the user does not exist in domaina which the server is joined to.
You need to point winbindd to a global catalog server, and then establish trust relationships between the GC and all of the domains.
Would setting up realms help?
No. The limitation is due to Active Directory, not realms or FreeRADIUS. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
"Jamie Crawford" <crawford@cmsu1.cmsu.edu> wrote:
I'm trying to validate a user from two trusted NT4 domains. I cannot get ntlm_auth --username=domainb/domainbuser to work. How are you supposed to validate a user with domain credentials, when you can't pass along the domain information? I think it's more of a limitation with ntlm_auth than anything.
Have you tried reading the configuration files? There are examples of passing domains to ntlm_auth. Alan DeKok.
participants (2)
-
Alan DeKok -
Jamie Crawford