Proxy of Computer Authentication
A.L.M.Buxey at lboro.ac.uk
Fri Sep 11 18:59:26 CEST 2009
> I have a freeradius server setup that back-ends to LDAP which works perfectly
> for every device and user configuration I have come across. Until now....
> I am now looking for a way to authentication XP workstation using Microsofts
> "Authenticate as Computer when ... whatever" and from what I have read and
> seen myself, this is just complete and udder voodoo.
this will come to use as a host/ entry - so you need to check if the user
name begins with host/ and, if so, set proxy-to-realm and proxy it off
to IAS .... or, you can get FreeRADIUS to deal with it just as good -
you'll need to use the mschap module, bind your FR box into the AD
and configure the ntlm_auth appropriately. we deal with thousands of machine
authentications with our FR boxes
radiusd -X will help us to help you
More information about the Freeradius-Users