How to configure FreeRADIUS authentication with Active Directory

Network RADIUS marketing at
Mon Jan 10 14:33:03 CET 2022

** How to configure FreeRADIUS authentication with Active Directory
Active Directory is widely used in the Enterprise and University systems. However, because of proprietary design decisions within Active Directory, getting it to work with FreeRADIUS requires a few extra steps.  

When FreeRADIUS uses Active Directory as a user database, certain limitations apply. Active Directory won’t give FreeRADIUS the “known good” password for FreeRADIUS to use. Instead, FreeRADIUS has to take the user authentication data (PAP, MS-CHAP, etc.) and hand them to Active Directory. It will check the information, and return success / fail to FreeRADIUS.

For MS-CHAP authentication, the way to connect FreeRADIUS to Active Directory is through Samba, and the ntlm_auth helper program. 

This article walks through the steps for configuring Samba to act as an intermediary between FreeRADIUS and Active Directory. 

Read the full article… <>

** Sign up to get this content directly
Want to get these articles in all their HTML glory? 
Sign up here: 

** Need RADIUS help?
Get commercial support from the team behind FreeRADIUS.

** What is the relationship between Network RADIUS and FreeRADIUS?
FreeRADIUS is an open source implementation of the RADIUS protocol and was written by Alan DeKok in 1999.

Network RADIUS is a private, for-profit company founded by Alan DeKok which provides commercial support for FreeRADIUS. The Network RADIUS team has been the primary contributor to FreeRADIUS for the last 20 years. The FreeRADIUS mailing list, wiki, and documentation are all moderated and maintained by the Network RADIUS team.

FreeRADIUS has always been, and will always continue to be, open source. The Network RADIUS team provides commercial support to paying clients, and free product development for the FreeRADIUS community at large.

All of our software development for FreeRADIUS is integrated into the Open Source platform, and will always continue to be.

More information about the Freeradius-Users mailing list