Bohannan, Chad W wrote:
OK, here is the situation. I have successfully configured RADIUS to authenticate/authorize NAS requests from my Cisco gear so long as the user “Auth-Type= System”. I have also managed to get Samba working and have joined the radius server to the AD realm in question. This is confirmed through the following:


The radius server doesn't specify MSCHAP. The NAS *tells* the radius server that this request *is* using MSCHAP by virtue of sending the appropriate MSCHAP attributes.

Configure your NAS (dialup server, VPN, IPSec+xauth, whatever) to do MSCHAP, and as long as the mschap module is in the authorize and authenticate sections, it will work. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to