win2003 Active Directory authentication

Alan DeKok aland at nitros9.org
Mon May 8 20:39:29 CEST 2006


"Frank Smith" <fds0000 at gmail.com> wrote:
> Based on what you guys are saying, it sounds like Radius -> Pam
> -> Pam-LDAP -> Active Directory sounds like the way to go.  Any objections?

  There's no need to use PAM.  FreeRADIUS has an LDAP module that works.

  Everything PAM can do to Active Directory, FreeRADIUS can do
natively.  i.e. PAP.

  In order to do mschap to AD, you need Samba & ntlm_auth.  PAM won't
help.

  Alan DeKok.




More information about the Freeradius-Users mailing list