freeRADIUS -> AD Auth

Alan DeKok aland at deployingradius.com
Fri Aug 15 13:15:14 CEST 2014


nfischer at hush.com wrote:
> The mschapv2 challange fails.
> --domain=%{mschap:NT-Domain} doesn´t change the result.

  You need to add "--request-nt-key " to the parameters for ntlm_auth.

  It is there in the default configuration.  You edited the
configuration and broke it.  Don't do that.

> Also i have another question:
> Is there a way to tell the clients (especially iOS/Android) that they
> have to use a Proxy-Server (e.g 192.168.1.254:3128)
> so that the Useres must not do that?

  That's a web proxy.  You can't configure that with RADIUS.

  Alan DeKok.


More information about the Freeradius-Users mailing list