Using ntlm and MS-CHAP authentication on the same server

[Alan DeKok]

Bugneac Constantin <bugneac at registru.md> wrote:
> I would like know if it is possible to configure the Freeradius
> to do authentication based on ntlm for one group of users
> and MS-Chap for other on the same server.

  Yes.  You can configure ntlm_auth as normal, and then for users with
passwords, do something like:

user	   User-Password := "password", MS-CHAP-Use-NTLM-Auth = No
	   ...

> The problem is that I do not want users from one group to
> get logging in sistem using credintials from other.

  You can configure it for groups, too:

DEFAULT	   Group == "no-ntlm-auth", MS-CHAP-Use-NTLM-Auth = No
	   ...


  Alan DeKok.