Exec and ntlm_auth

[Alan DeKok]

freeradius at corwyn.net wrote:
...
> Add to top of ./raddb/users:
> 
> DEFAULT     Ldap-Group == "UserGroup",Service-Type =
> NAS-Prompt-User,cisco-avpair = "shell:priv-lvl=15"

  Are you sure that is correct?

> If I removing authorization from the Cisco config to:
> no aaa authorization exec default group radius none
> 
> and then I can log in.
> 
> At the top of ./users:
> rsteeves   Cleartext-Password := "xxx"
>            Service-Type = NAS-Prompt-User,
>            cisco-avpair = "shell:priv-lvl=15"

  Why does that entry look so different from the previous one?

  See "man users" for documentation on the format, and how it works.

  Alan DeKok.