EAP-TTLS (PAP) not working with NT domain - debian freeradius 1.1.7

Alan DeKok aland at deployingradius.com
Tue Mar 25 07:40:34 CET 2008


James McOrmond wrote:
> As per previous emails, since i'm using samba/ldap i'm able to pull the
> nt/lmpassword fields directly out of the ldap.  Should this method
> negate the use of the ntlm_auth method?

  Yes.

  See ldap.attrmap.  The LDAP module uses this to map LDAP attributes to
RADIUS attributes.  Once FreeRADIUS has an NT hash, it can authenticate
users.

  Alan DeKok.



More information about the Freeradius-Users mailing list