Should work if you have enough knowledge about all three components. The main "problem" would be that FR and samba uses different schema for storing user passwords, but if you're familiar with triggers then it should be possible. Just try it. One other thing to note however, ntlm_auth is only necessary if your backend (usually AD) don't give out clear-text or nt-hash. If you have one of those available (in the case of mysql-backed samba, it's nt-hash), you don't need ntlm_auth. -- Fajar On Sun, Sep 25, 2011 at 6:17 PM, Andreas Rudat <rudat@endstelle.de> wrote:

Hi again,

erm it should work if I use mysql for samba accounts and using ntlm_auth + ms-chap on radius?

On Sun, Sep 25, 2011 at 7:05 PM, Andreas Rudat <rudat@endstelle.de> wrote:

Am 25.09.2011 13:43, schrieb Fajar A. Nugraha:

...

Should work if you have enough knowledge about all three components. The main "problem" would be that FR and samba uses different schema for storing user passwords, but if you're familiar with triggers then it should be possible. Just try it.

yeah thats the problem I thought. No I'm not realy familiar with triggers and sql

EIther hire someone with enough expertise, or spend some time (possibly several days or weeks, depends on your current level of expertise) to understand it. Most (if not all) of the required reference materials are available on the internet already. Your choice, really, time or money.

...

One other thing to note however, ntlm_auth is only necessary if your backend (usually AD) don't give out clear-text or nt-hash. If you have one of those available (in the case of mysql-backed samba, it's nt-hash), you don't need ntlm_auth.

Thats also bad only nt-hash is not good, I tried to set up Ad but got heavy problems with setting it up. But it would be the best thing for auth samba and fr users I think? Last way would be perhaps of using smbpasswd.

At this point I'd also suggest hire a good english translator, if necessary. I'm finding it hard to understand what you're trying to say. If you only want to use samba then you don't need AD. And if you ONLY want to use samba + mysql, you should be able to choose whether to have nt-hash or clear-text stored in the db, both of which can be used by FR for pap or chap. -- Fajar

HI Alan, yes that is what I want, but my ldap doesn't work atm ;-) But thanks. Andreas Am 25.09.2011 17:02, schrieb Alan DeKok:

Andreas Rudat wrote:

...

Thats also bad only nt-hash is not good, I tried to set up Ad but got heavy problems with setting it up. I have no idea why. See my web page:

http://deployingradius.com

It has complete documentation on AD integration, including what configuration to change, how to debug it, and what to expect. If you follow the directions it *will* work.

Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Am 25.09.2011 23:07, schrieb Alan DeKok:

Andreas Rudat wrote:

...

HI Alan,

yes that is what I want, but my ldap doesn't work atm ;-) See the FAQ for "it doesn't work"

Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

sorry, you miss understood me, I meant MY LDAP doesn't work atm, independently by radius :) Andreas