Hi Tim,
The module used to connect to a RADIUS server does not support MSCHAP.
You could do it by configuring a proxy in FreeRADIUS.
Look at the raddb/proxy.conf and use raddb/users to add the
Proxy-To-Realm attribute if necessary.
But it may be unnecessary. If your NPS server is using Active Directory
as backend, why not simply authenticate directly against it and cut out
the middleman?
Regards,
--
Louis Munro
[email protected] :: www.inverse.ca
+1.514.447.4918 *125 :: +1 (866) 353-6153
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence
(www.packetfence.org)
On 2013-05-23 10:25 , Palmer, Tim wrote:
Good morning all,
Is Radius against a Microsoft NPS group (one proxy, two auth servers)
supported out of the box as an Authentication source?
I am able to authenticate against Active Directory fine, but my
attempts to make an EAP-MSCHAP connection to our radius system always
fails, seemingly because PF is sending the request as auth-type PAP.
Problems with chained proxies?
PF 4.0.1
Centos 6.4
Test switch: Juniper EX-4200
Thank you for your time,
Tim
------------------------------------------------------------------------------
Try New Relic Now & We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service
that delivers powerful full stack analytics. Optimize and monitor your
browser, app, & servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
------------------------------------------------------------------------------
Try New Relic Now & We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service
that delivers powerful full stack analytics. Optimize and monitor your
browser, app, & servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
