Dave Mussulman <[EMAIL PROTECTED]> wrote:
> Inside, where the PEAP/MS-CHAPv2 supplied login is being verified.

  To authenticate EAP-MSCHAP, the server ends up calling the MSCHAP module.

  The MS-CHAP-Use-NTLM-Auth attribute (value yes,no) controlls whether
or not the MSCHAP module uses ntlm_auth.

  So.. configure mschap to use ntlm_auth, and then for the users which
*are* found in SQL, set "MS-CHAP-Use-NTLM-Auth = no".

  Alan DeKok.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to