Authenticate with machine account and without ntlm_auth

[Rodrigo Antunes]

The hashes are nt-challenge and nt-response, I think they aren't the same as the nt-password.

Does someone know how to obtain the machine account password or nt-password from a windows machine account?


I will also try to explain better what I want to achieve, maybe someone have another solution:


I have a windows machine that is in kiosk mode, it is not domain joined and has no local users.
I need this machine to authenticate against radius automatically, without the user provide credentials.

The alternatives i tried:

mac auth - don't work because windows client always try mschap
kiosk user - don't work because kios mode don't has password
machine user - the one I'm trying


Probably this is more of a windows configuration than a freeradius one, but if somemone already did this I will gladly thanks.








Em segunda-feira, 18 de novembro de 2024 às 10:51:53 BRT, Alan DeKok <aland at deployingradius.com> escreveu: 





On Nov 18, 2024, at 8:26 AM, Rodrigo Antunes via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
> The only thing I have found are the nt hashes but I think I can't check them in users file.

  You can add them to the "users" file:

bob    NT-Password := 0xabcdef

    ...

  Alan DeKok.