Captive portal: can I use chap or pap in conjunction with ntlm_auth?

[Ivan Kalik]

>>>
>>> Is there a way for me to use pap with users stored in Active Directory?
>>
>> Yes. If you followed AD integration document you have already done that.
>> Now, the best way to integrate that with accounts stored elsewhere
>> (files,
>> sql, ldap, etc.) is to create failover after pap in authorize section of
>> default virtual server (instead of forcing it in users file):
>>
>> if(!Auth-Type) {
>>     update control {
>>          Auth-Type = "ntlm_auth"
>>     }
>> }
>>
>
> Awesome. Thank you that worked like a charm!
>

It should be if(!control:Auth-Type). I have added the guide for combining
AD accounts with accounts stored elsewhere to freeradius wiki:

http://wiki.freeradius.org/Combining_authentication_of_AD_accounts_%28ntlm_auth%29_with_accounts_stored_elsewhere

Ivan Kalik
Kalik Informatika ISP