Authenticate with machine account and without ntlm_auth

Matthew Newton mcn at freeradius.org
Mon Nov 18 14:53:09 UTC 2024


On 18/11/2024 14:48, Rodrigo Antunes via Freeradius-Users wrote:
> I will also try to explain better what I want to achieve, maybe someone have another solution:
> 
> I have a windows machine that is in kiosk mode, it is not domain joined and has no local users.
> I need this machine to authenticate against radius automatically, without the user provide credentials.
> 
> The alternatives i tried:
> 
> mac auth - don't work because windows client always try mschap
> kiosk user - don't work because kios mode don't has password
> machine user - the one I'm trying

Install a certificate on it and use EAP-TLS, as I suggested the other 
day. If it's not domain joined then you'll need to install the 
certificate yourself, but other than that the process is basically the same.

-- 
Matthew


More information about the Freeradius-Users mailing list