AW: ntlm_auth for PEAP with rlm_perl
Because I have a perl script to switch between two different Samba-servers for authorization. I had several problems with this setup because parallel requests cause that the wrong domain is available (The domain-switch wouldn't be blocked for a request). Is there an easier way to do the ntlm_auth with the perl module? Or is there a way to build some kind of dependencies between the mschap module and the perl module? Lukas -----Ursprüngliche Nachricht----- Von: freeradius-users-bounces+lukas.habegger=erz.be.ch@lists.freeradius.org [mailto:freeradius-users-bounces+lukas.habegger=erz.be.ch@lists.freeradius.org] Im Auftrag von Alan DeKok Gesendet: Freitag, 16. Februar 2007 11:17 An: FreeRadius users mailing list Betreff: Re: ntlm_auth for PEAP with rlm_perl Habegger Lukas, ERZ-AZD-AIL wrote:
Hi
Is it possible to do the ntlm_auth authorization used for PEAP with a perl-script over rlm_perl?
Why? The MSCHAP module already does this for you. If you want to know how to re-do all of that work in the Perl module, look at the code in the mschap module. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Habegger Lukas, ERZ-AZD-AIL wrote:
Because I have a perl script to switch between two different Samba-servers for authorization.
Which doesn't work too well. Samba isn't designed to do that.
I had several problems with this setup because parallel requests cause that the wrong domain is available (The domain-switch wouldn't be blocked for a request).
Yup. That can be solved by running the server in single-threaded mode.
Is there an easier way to do the ntlm_auth with the perl module? Or is there a way to build some kind of dependencies between the mschap module and the perl module?
No. The ntlm_auth configuration in the mschap module is just a text field. It doesn't have to run ntlm_auth... it can run a Perl script to switch between two different Samba servers. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
participants (2)
-
Alan DeKok -
Habegger Lukas, ERZ-AZD-AIL