Authenticate with machine account and without ntlm_auth
Matthew Newton
mcn at freeradius.org
Mon Nov 18 14:53:09 UTC 2024
On 18/11/2024 14:48, Rodrigo Antunes via Freeradius-Users wrote:
> I will also try to explain better what I want to achieve, maybe someone have another solution:
>
> I have a windows machine that is in kiosk mode, it is not domain joined and has no local users.
> I need this machine to authenticate against radius automatically, without the user provide credentials.
>
> The alternatives i tried:
>
> mac auth - don't work because windows client always try mschap
> kiosk user - don't work because kios mode don't has password
> machine user - the one I'm trying
Install a certificate on it and use EAP-TLS, as I suggested the other
day. If it's not domain joined then you'll need to install the
certificate yourself, but other than that the process is basically the same.
--
Matthew
More information about the Freeradius-Users
mailing list