Steve OBrien <[EMAIL PROTECTED]> wrote:
> When trying to test this with PEAP I occasionally get the ntlm_auth
> attempting to use winbindd but mostly I just see the EAP
> conversation(which is known good).
If there's a User-Password available, the MS-CHAP module will use
that. To force ntlm_auth, set:
MS-CHAP-Use-NTLM-Auth = 1
> DEFAULT Auth-Type := mschap
> Fall-Through = 1
You shouldn't need that, even for testing.
Try it with plain MS-CHAPv2 first, and then move to PEAP.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
