Machine-Authentication against SaMBa account in LDAP Directory

Phil Mayers p.mayers at imperial.ac.uk
Tue May 8 21:31:29 CEST 2007


Christian Hohmann wrote:
> Hi members,
> 
> I have a problem with the name of hosts. Here is the situation: I
> have an LDAP Directory which is filled by samba-Deamon, for example
> with hosts that are added to my domain. Samba signs every
> host-account with a "$" at the end. If my laptop would be named
> christian, the entry created by SaMBa in LDAP is "christian$"

More recent versions of FreeRadius have an option in the mschap module 
to handle this - you can do:

filter = "(uid=%{mschap:User-Name:-%{User-Name}})"

...and the mschap module will strip the host/foo.bar to give foo$



More information about the Freeradius-Users mailing list