Captive portal: can I use chap or pap in conjunction with ntlm_auth?

Ivan Kalik tnt at
Thu Jul 30 00:29:26 CEST 2009

>>> Is there a way for me to use pap with users stored in Active Directory?
>> Yes. If you followed AD integration document you have already done that.
>> Now, the best way to integrate that with accounts stored elsewhere
>> (files,
>> sql, ldap, etc.) is to create failover after pap in authorize section of
>> default virtual server (instead of forcing it in users file):
>> if(!Auth-Type) {
>>     update control {
>>          Auth-Type = "ntlm_auth"
>>     }
>> }
> Awesome. Thank you that worked like a charm!

It should be if(!control:Auth-Type). I have added the guide for combining
AD accounts with accounts stored elsewhere to freeradius wiki:

Ivan Kalik
Kalik Informatika ISP

More information about the Freeradius-Users mailing list