Problem with LDAP and ntlm_auth

[Phil Mayers]

On 05/05/11 15:17, Robert Mc Cready wrote:
> We use Novell eDirectory and DSFW (Directory Services for Windows) which
> is kind of a Windows domain inside an OU in eDirectory. I want to
> authenticate users using LDAP and Windows computers account using
> ntlm_auth. There is only computers accounts in the Windows domain.
>
> The computer authentication is working fine but the users authentication
> with LDAP fails if ntlm_auth is configured. If I don't use ntlm_auth the
> users authentication works. Is there a way to have both of them working
> together?

Yes. Something like this:

authorize {
   ...
   if (User-Name !~ /^host\//) {
     update control {
       MS-CHAP-Use-NTLM-Auth := no
     }
   }
   ...
}