Machine-Authentication against SaMBa account in LDAP Directory

[Jacob Jarick]

Christan,
You may be able to overcome / work around the problem by specifying a
2nd ldap module. Have one that appends the $ and checks and one that
doesnt.

On 5/9/07, Phil Mayers <p.mayers at imperial.ac.uk> wrote:
> Christian Hohmann wrote:
> > Hi members,
> >
> > I have a problem with the name of hosts. Here is the situation: I
> > have an LDAP Directory which is filled by samba-Deamon, for example
> > with hosts that are added to my domain. Samba signs every
> > host-account with a "$" at the end. If my laptop would be named
> > christian, the entry created by SaMBa in LDAP is "christian$"
>
> More recent versions of FreeRadius have an option in the mschap module
> to handle this - you can do:
>
> filter = "(uid=%{mschap:User-Name:-%{User-Name}})"
>
> ...and the mschap module will strip the host/foo.bar to give foo$
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>