freeRADIUS+samba3.0.1+AD(multiple domains)

[Alan DeKok]

Hangjun He wrote:
> But there are multiple domains in active-directory. How to configure
> freeRADIUS or samba can let it support multiple domains?

  FreeRADIUS just used Samba to do authentication with AD.  The winbind
&& ntlm_auth API used in Samba cannot authenticate to multiple domains.

  People have done this by writing wrapper scripts to start/stop the
Samba processes for each authentication request, but that's a very bad hack.

  Alan DeKok.