freeradius windows machine authentication

[Marco Gaiarin]

Mandi! Härtl, Calvin
  In chel di` si favelave...

> Is FreeRADIUS natively capable of doing machine authentication via AD, do I have to configure some additional files or are there any modules that I can install to do this for me?

Sure! I'm using it against an Samba AD domain,but i think it is exactly the
same.

I've not done some strange configuration, the same plain configuration that
work for user work also for computers; currently i use:

	winbind_username = "%{mschap:%{User-Name}:-None}"
	winbind_domain = "LNFFVG"


But NOTE that, clearly, if you have setup LDAP filters:

1) your LDAP 'base_dn' HAVE TO contain also machine account OU.

2) if you have setup group filters, filters HAVE TO match also computer
 account.


On windows client side, i set explicitly in advanced options only the
'computer account' auth.

-- 
  Does anybody here remember Vera Lynn?
							(Pink Floyd)