Hello Peter, kerberos is not supported by the windows supplicant, so it´s not possible. What you can do is to enable the nt-hash feature in packetfence and just deal with that. (no more ntlm)
Regards Fabrice Le mer. 25 août 2021 à 05:54, Chin, Peter via PacketFence-users < packetfence-users@lists.sourceforge.net> a écrit : > Hello All > > > > We are looking at implementing PacketFence as our NAC with few conditions. > One being able to perform users and machines authentication and with > objects from active directory. Secondly, authenticate against active > directory using Kerberos instead of NTLM or NTLMv2 because of security > requirements. NTLM and V2 are the protocols written in the documentation > but not Kerberos. Has anyone implemented PacketFence with these > requirements successfully? > > > > Thank you, > > > > Peter Chin | Sr. Technical Programmer | IT Operations | Community College > of Rhode Island |400 East Ave, Warwick RI, 02886 | pc...@ccri.edu | (401) > 825.1237 > > > _______________________________________________ > PacketFence-users mailing list > PacketFence-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/packetfence-users >
_______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users