dot1x with samba workstation accounts

[Jens Weibler]

Hello,

I'm trying to authenticate my windows boxes with dot1x against
freeradius. Everything is working fine if I'm using a normal user.

But I want to use the samba workstation accounts from ldap. The problem:
mschap blocks accounts which have only the W-sambaAcctFlag set:

> info: [mschap] SMB-Account-Ctrl says that the account is disabled, or
> is not a normal account.

Shouldn't it be possible to use workstation accounts? My temporary
solution is to exclude querying sambaAcctFlag. No real solution if you
want to lock out really expired or disabled accounts :(

-- 
Jens Weibler


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6022 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20100616/470f7114/attachment.bin>