ntlm_auth and Server 2008 R2 issues

[Alan DeKok]

Walter Gould wrote:
> We are having the same issue as noted here: 
> http://lists.freeradius.org/pipermail/freeradius-users/2009-November/msg00664.html

  See also https://bugzilla.samba.org/show_bug.cgi?id=6563

> I am guessing there is no way to use LDAP for MSCHAP authentication?

 Exactly.

>  I
> have read other posts on the list that have said it won't work (which
> kind of makes sense to me).  However, it sure would be nice to side step
> Samba on this issue.

  It's impossible.  (for now)

> We are not doing group checking at this point, just authentication. 
> Currently running FreeRADIUS 2.0.3.  Any suggestions/comments will be
> appreciated.  I guess my next e-mail will be to the Samba mailing list....

  Install FreeRADIUS 2.1.8, and possibly Samba 3.4.3

  Alan DeKok.