Freeradius and AD

[joe vieira]

i do the exact same thing like this.

DEFAULT Prefix == "domainnameinputted", Strip-User-Name = No
        domain = "domainnameoutputted"


then in my ntml_auth section: 
ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --domain=%{domain} 
--username=%{mschap:User-Name} --challenge=%{mschap:Challenge:-00} 
--nt-response=%{mschap:NT-Response:-00}"

make sure you nake a dictionary attribute for "domain" as well.

Joe Vieira
UNIX Systems Administrator 
Clark University




On Tuesday 11 December 2007 9:29:46 am Dave Gibelli wrote:
> Hi
>
> I am testing Freeradius within an 802.1x environment.
>
> I want to send authentication request to 4 different AD DC's depending
> on the Domain sent from the client to the Authenticator.
>
> Can Freeradius forward request in this way?
>
> Dave
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html