mschap via ntlm_auth over a socket

Matthew Newton mcn4 at leicester.ac.uk
Wed Dec 3 15:03:25 CET 2014


On Wed, Dec 03, 2014 at 01:18:49PM +0000, Garber, Neal wrote:
> > Ah, the AD auth spiral of doom. Very puzzling that one. Never really got to the bottom of what exactly the cause was
> 
> Have you looked at setting Windows registry entry
> MaxConcurrentApi (see
> https://support.microsoft.com/kb/975363?wa=wsignin1.0)? 

Thanks, yes - looked at that. I'm not currently convinced it's
that limit we're hitting (but I'm probably reading the numbers
incorrectly...) and it looks more like the ntlm_auth/winbind side.

But having said that, it'll be easier to get FR3 in live than
change a registry setting on a DC here. And getting any traction
on FR3 is hard enough.

Cheers,

Matthew


-- 
Matthew Newton, Ph.D. <mcn4 at le.ac.uk>

Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253, <ithelp at le.ac.uk>


More information about the Freeradius-Devel mailing list