Any way for ntlm_auth + winbind to not use ms-chap?
mcn4 at leicester.ac.uk
Thu Jun 16 23:58:39 CEST 2016
On Thu, Jun 16, 2016 at 02:49:52PM -0700, Mike Ely wrote:
> On 06/16/2016 02:36 PM, Matthew Newton wrote:
> >On Thu, Jun 16, 2016 at 11:51:09AM -0700, Mike Ely wrote:
> >Not sure the question makes much sense. If you're doing MSCHAP
> >then there is a challenge/response by definition.
> I guess to simplify the question: is it absolutely essential to use MSCHAP
> when authenticating against winbind, or can a simpler mechanism be used?
See mods-available/ntlm_auth. You can send a username and password directly.
(If you're living on the bleeding edge, see rlm_winbind in v3.1.x
that I committed a week or two ago).
Does that help?
Matthew Newton, Ph.D. <mcn4 at le.ac.uk>
Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom
For IT help contact helpdesk extn. 2253, <ithelp at le.ac.uk>
More information about the Freeradius-Users