On 09/04/14 18:38, Phil Mayers wrote: > You have basically three options: Actually technically speaking four: 4. Patch Samba to set the MSV1_0_ALLOW_MSVCHAPV2 flag as documented toward the end of this thread: http://freeradius.1045715.n5.nabble.com/definitive-info-on-authenticating-to-AD-via-NTLMv2-td5719249.html