ntlm_auth with ms-chap
aland at deployingradius.com
Sat Sep 1 14:56:02 CEST 2018
On Sep 1, 2018, at 8:17 AM, Jürgen Obermeyer <om at oegym.de> wrote:
> Not able to get ntlm_auth working, I switched now to krb5. 'radtest' says:
That's good, but we don't need to see the output of radtest.
> May I ignore the "PAP WARNINGS"?
> And will wireless clients (or the
> users) authenticate if 'radtest' (via ssh) is successfull?
Only EAP-TTLS will work. PEAP will not. That's because only EAP-TTLS supplies the clear text password that is needed by krb5.
Something is very wrong with the Samba / AD infrastructure if MS-CHAP doesn't work.
More information about the Freeradius-Users