Proxy of Computer Authentication

[Alan Buxey]

Hi,

> I have a freeradius server setup that back-ends to LDAP which works perfectly
> for every device and user configuration I have come across.  Until now....
> 
> I am now looking for a way to authentication XP workstation using Microsofts
> "Authenticate as Computer when ... whatever" and from what I have read and
> seen myself, this is just complete and udder voodoo.

this will come to use as a host/ entry - so you need to check if the user
name begins with host/ and, if so, set proxy-to-realm and proxy it off
to IAS ....  or, you can get FreeRADIUS to deal with it just as good -
you'll need to use the mschap module, bind your FR box into the AD
and configure the ntlm_auth appropriately. we deal with thousands of machine
authentications with our FR boxes

radiusd -X  will help us to help you


alan