PEAP against Samba PDC through auth_ntlm
Well, I search for "PEAP Machine Authentication", and I only found some of my posts concerning how to make machine auth working against a windows AD... nothing concerning a samba acting as PDC... As I said, PEAP auth (both machine and user) work against an AD, the problem only concerns the samba PDC. I found some posts where logins like "host\mahine_name" seem to be converted as "machine_name$" (like http://lists.freeradius.org/pipermail/freeradius-users/2006-March/051487.htm...), but none explains how to do this: hints file ? proxy.conf ? realms ? ntdomain_hack ? Regards, Jeremy On May 19, 2006, at 2:00 AM, Michael Griego wrote:
Search through the list archives for "PEAP Machine Authentication"
=?ISO-8859-1?Q?J=E9r=E9my_Cluzel?= <j.cluzel@online.fr> wrote:
Well, I search for "PEAP Machine Authentication", and I only found some of my posts concerning how to make machine auth working against a windows AD... nothing concerning a samba acting as PDC...
http://lists.freeradius.org/pipermail/freeradius-users/2005-October/047837.h... Alan DeKok.
Jérémy Cluzel wrote:
Well, I search for "PEAP Machine Authentication", and I only found some of my posts concerning how to make machine auth working against a windows AD... nothing concerning a samba acting as PDC... As I said, PEAP auth (both machine and user) work against an AD, the problem only concerns the samba PDC.
I found some posts where logins like "host\mahine_name" seem to be converted as "machine_name$" (like http://lists.freeradius.org/pipermail/freeradius-users/2006-March/051487.htm...), but none explains how to do this: hints file ? proxy.conf ? realms ? ntdomain_hack ?
CVS and 1.1.0+ versions of FreeRadius do this host\foo -> foo$ conversion for you inside the rlm_mschap module. Earlier versions will need a hints file entry, something like: DEFAULT User-Name =~ "^host\\\\(.*)" User-Name = `$1$`
participants (3)
-
Alan DeKok -
Jérémy Cluzel -
Phil Mayers