ntlm_auth not working from within Freeradius with Domain in Username

Holger Steppke team4m at muenster.de
Mon Jan 19 17:16:45 CET 2009


this would then just strip of the Domainname from the --username
parameter. So its lost.
If possile i like to keep it eithere in the username or if i can get it
in anothere variable (will check rlm_mschap if thee is one) to feed this
into --domain. In case its Empty i could pace a Default Domain there or
just let i fail.

Because if i dont keep it and hand it over to the ntlm i belive i can
only authenticate against one Domain. In case of Trusted Domains liek
TEST1 TEST2 TEST3 i need to tell ntlm (and then the PDC to whom i
authenticate against) in which Domain the user is.

At the End i like to use what is supplied on the Logon Screen in Windows
and there the Domain is importand as well.


tnt at kalik.net wrote:
>> --username=%{Stripped-User-Name:-%{User-Name:-None}}
> Try mschap:User-Name. That suggestion should be right above ntlm_auth
> line in mschap configuration.
> Ivan Kalik
> Kalik Inormatika ISP
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

More information about the Freeradius-Users mailing list