Dear Josh Howlett,
--Friday, November 29, 2002, 3:10:01 PM, you wrote to [EMAIL PROTECTED]:
JH> Does this mean that I can authenticate MSCHAP against a remote SMB
JH> server (using rlm_smb), and authorise them using, for example, an DBMS?
Yes.
JH> I take it that rlm_smb will not provide MPPE keys, only rlm_mschap?
Exactly. If you wanna use native Windows authentication with any access
authentication different from PAP the only solution (for a while) is to
use FreeRADIUS as a proxy to MS IAS.
JH> thanks josh.
JH> On Wed, 2002-11-27 at 15:52, 3APA3A wrote:
>> Dear Josh Howlett,
>>
>> No. rlm_smb is authentication module, not authorization one. You can use
>> either rlm_mschap or rlm_smb.
>>
>> --Wednesday, November 27, 2002, 6:46:43 PM, you wrote to [EMAIL PROTECTED]:
>>
>> JH> Does that include rlm_smb?
>>
>> JH> thanks, josh.
>>
>> JH> On Wed, 2002-11-27 at 15:34, 3APA3A wrote:
>> >> Dear Josh Howlett,
>> >>
>> >> You can use mschap authentication module in conjunction with any
>> >> authorization module (for example sql or dbm). All you need is cleartext
>> >> or NT-crypted password to be accessable. So you can use almost any DBMS
>> >> (Oracle, MySQL, PostgreSQL, MS SQL, DB2, Sybase, etc), LDAP, text
>> >> password file format, DBM file format, and users file.
>> >>
>> >> --Wednesday, November 27, 2002, 5:21:26 PM, you wrote to
>[EMAIL PROTECTED]:
>> >>
>> >> JH> Hi,
>> >>
>> >> JH> What can Freeradius use to authenticate MS-CHAP against? I know of the
>> >> JH> following methods:
>> >> JH> - the 'users' file
>> >> JH> - /etc/smbpasswd
>> >> JH> - LDAP directory
>> >> JH> - proxy to another RADIUS server
>> >>
>> >> JH> Are there any others?
>> >>
>> >> JH> thanks, josh.
>> >>
>> >>
>> >>
>> >> --
>> >> ~/ZARAZA
>> >> Ms ` b veknl, Shk|l, gdexmhi jkhl`r - efekh rnk|jn
>> >> }rn lnfmn m`gb`r| jkhl`rnl, bonkme qmnqm{i. (Rbem)
>> >>
>>
>>
>> --
>> ~/ZARAZA
>> Ohxhre eye. H eqkh b b`xei oerhvhh hlekq j`jni-mhasd|
>> ql{qk, rn, me qreqmq|, p`gzqmhre b wel dekn. (Rbem)
>>
--
~/ZARAZA
������������� ���� ����� ������� ��� ������������ ���������. (���)
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html