AD/Samba and machine account auth...

Matthew Newton mcn at
Mon Jul 19 17:17:25 CEST 2021

On 19/07/2021 16:02, Marco Gaiarin wrote:
> Debian stretch, freeradius 3.0.12+dfsg-5+deb9u1 and samba
> 2:4.10.18+dfsg-0.1stretch1, using the bultin winbind library.

> I'm not in a multidomain forest, so i've simply fix with an:
> 	winbind_username = "%{%{mschap:User-Name}:-None}"
> 	winbind_domain = "LNFFVG"
> And in this way machne and user account works as expected; but i
> think/hope that there's a better fix.

Try 3.0.23. There was a recent update to how '%{mschap...}' is handled.


More information about the Freeradius-Users mailing list