Machine-Authentication against SaMBa account in LDAP Directory

[Phil Mayers]

Christian Hohmann wrote:
> Hi members,
> 
> I have a problem with the name of hosts. Here is the situation: I
> have an LDAP Directory which is filled by samba-Deamon, for example
> with hosts that are added to my domain. Samba signs every
> host-account with a "$" at the end. If my laptop would be named
> christian, the entry created by SaMBa in LDAP is "christian$"

More recent versions of FreeRadius have an option in the mschap module 
to handle this - you can do:

filter = "(uid=%{mschap:User-Name:-%{User-Name}})"

...and the mschap module will strip the host/foo.bar to give foo$