Freeradius 2.0 with Activedirectory Integration Failed

tnt at kalik.net tnt at kalik.net
Tue Nov 18 10:50:08 CET 2008


>I am a little confused with this...
>
>tnt-4 wrote:
>>
>> ntlm_auth in mschap module works only for - mschap requests. It will not
>> work for pap requests.
>>
>
>Normally, ntlm_auth is set in the MSCHAP module. Authentication requests
>from logging into the system, like SSH, uses PAP?
>
>Is there anyway that I can get the server using pam_radius to get
>authentication from the radius server? And the server, in turn gets the
>authentication from ActiveDirectory?
>
>I am quite new to this, and might have problem understanding clearly...
>

Instructions first show you how to set up and test ntlm_auth with pap
requests. Simply: don't remove users file entry setting ntlm_auth
auth-type; don't remove ntlm_auth from authenticate; keep ntlm_auth
exec module. Just keep those things and pap requests will work as well.
The only thing to change is operator in users file:

DEFAULT   Auth-Type = ntlm_auth

(= not :=).

Ivan Kalik
Kalik Informatika ISP




More information about the Freeradius-Users mailing list