Wifi + Active Directory without ntlm

[Alan DeKok]

> On May 19, 2020, at 7:35 AM, Клеусов Владимир Сергеевич via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
> 
> Sum up. I can't use AD without ntlm. Because there are encrypted passwords coming from AD. Do I need Ntlm to work with encrypted passwords ?

  That's a little confused.

  Doing MS-CHAP to AD requires ntlm_auth.

  If you have PAP, you can do normal LDAP bind to AD.

  If you're not using AD, then FreeRADIUS supports all standard encryption types.  But these only work for PAP.  NT hashed passwords also work for MS-CHAP.

  Alan DeKok.