802.1x machine authentication patch help

[Phil Mayers]

On Mon, 2007-10-01 at 10:41 +0100, Marco Casulli wrote:
> Touchy! :-)

Read this list for a while, then you'll see why people get irate when
their advice isn't followed ;o)

> 
> I was only asking as I am not an expert on this subject and wanted to
> understand why Samba came in the loop?

In a domain environment, FreeRadius authenticates mschap by a callout to
the Samba "ntlm_auth" program; this in turn makes an RPC call to the
domain controller. In older versions of samba, the RPC call lacks the
flag to say "machine accounts are acceptable here", so they fail
authentication.

In later versions, the flag is present.