how to configure Cisco vpn clients againts freeradius

[Jevos, Peter]

  Err... no.  That won't work.

> But the vpn cisco clients are authenticated through
domainname\username
> and password

  Then you don't need to edit the mschap configuration.

> 
> Is this ntlm_auth2 in the mschap ok ? or should I remove
> --domain=%{%{mschap:NT-Domain}:} ?

  Delete the "ntlm_auth2" line from the mschap config.  It does nothing.

> I also changed users to :
> 
> DEFAULT          Auth-Type := ntlm_auth2,Huntgroup-Name == "vpn"

  That should work.

  Dear Alan

Yest , it'working, but I had to change the users file, cause it falled
down always into ntlm_auth2, when I wante to authenticate with my
username
Now it looks like:

DEFAULT         Auth-Type := ntlm_auth2,Huntgroup-Name == "vpn"
                Fall-Through = Yes

username   Auth-Type := ntlm_auth
           Service-Type = NAS-Prompt-User,
           cisco-avpair = "shell:priv-lvl=15"

And this works, but only with one domain. I need to check how it works
with more domains

BY for now thanks a lot, I will let you know

Pet