Re: authenticate machine accounts with ntlm_auth

2005-08-01 Thread Michael Fisher
Kris Benson wrote: I'm very frustrated now after spending a couple of weeks trying to get free radius to authenticate my Win2k machine accounts against active directory. :-( Sorry, blame Microsoft. It isn't possible, but they don't make it obvious that it's not possible. Alan, do

Re: authenticate machine accounts with ntlm_auth

2005-08-01 Thread Stefan Winter
Hi, > It sounds to me like you're saying this is a server-side issue. Since AD > is available via LDAP, why couldn't this FreeRadius install just use > rlm_ldap to access the machine account info in AD? No. There is one important difference between plain LDAP and AD: an AD server will _never_ g

Re: authenticate machine accounts with ntlm_auth

2005-08-01 Thread Alan DeKok
"Kris Benson" <[EMAIL PROTECTED]> wrote: > It sounds to me like you're saying this is a server-side issue. I'm saying the exact opposite. It's a function of running on Windows, and it has nothing to do with the RADIUS server. FreeRADIUS can run on Windows, and with the right code, it will most

Re: authenticate machine accounts with ntlm_auth

2005-07-31 Thread Kris Benson
>> I'm very frustrated now after spending a couple of weeks trying to get >> free radius to authenticate my Win2k machine accounts against active >> directory. :-( > > Sorry, blame Microsoft. It isn't possible, but they don't make it >obvious that it's not possible. > >> Alan, do you know of any

Re: authenticate machine accounts with ntlm_auth

2005-07-29 Thread Alan DeKok
<[EMAIL PROTECTED]> wrote: > I'm very frustrated now after spending a couple of weeks trying to get > free radius to authenticate my Win2k machine accounts against active > directory. :-( Sorry, blame Microsoft. It isn't possible, but they don't make it obvious that it's not possible. > Alan,

RE: authenticate machine accounts with ntlm_auth

2005-07-29 Thread martin.p.bradley
>> j.cluzel wrote: >> Is it possible to authenticate a machine account with ntlm_auth ? >No. AD does not permit that. > Alan DeKok. I'm very frustrated now after spending a couple of weeks trying to get free radius to authenticate my Win2k machine accounts against active directory. :-( Alan,

Re: authenticate machine accounts with ntlm_auth

2005-06-30 Thread Alan DeKok
=?ISO-8859-1?Q?J=E9r=E9my_Cluzel?= <[EMAIL PROTECTED]> wrote: > Is it possible to authenticate a machine account with ntlm_auth ? No. AD does not permit that. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

authenticate machine accounts with ntlm_auth

2005-06-30 Thread Jérémy Cluzel
Hi, Is it possible to authenticate a machine account with ntlm_auth ? When a machine tries to authencate itself, the username looks like this: "host/hostname.domain.org" I don't know if ntlm_auth is able to understand this format... Regards Jeremy - List info/subscribe/unsubscribe? See http: