definitive info on authenticating to AD via NTLMv2

2013-03-26 Thread Alex Sharaz
Hi., I've been running ntlm_auth to authenticate our 802.1x users against AD for a number of months without problems…… until this morning when our Systems group tightened up auth requirements to only use NTLMv2. and my ntlm_auth module started failing I'm running FR van 2.2 and samba Vsn 3.6.3

Re: definitive info on authenticating to AD via NTLMv2

2013-03-26 Thread Alan DeKok
Alex Sharaz wrote: I've been running ntlm_auth to authenticate our 802.1x users against AD for a number of months without problems…… until this morning when our Systems group tightened up auth requirements to only use NTLMv2. and my ntlm_auth module started failing Which breaks RADIUS.

Re: definitive info on authenticating to AD via NTLMv2

2013-03-26 Thread Phil Mayers
On 26/03/2013 14:21, Alex Sharaz wrote: Hi., I've been running ntlm_auth to authenticate our 802.1x users against AD for a number of months without problems…… until this morning when our Systems group tightened up auth requirements to only use NTLMv2. and my ntlm_auth module started failing As

Re: definitive info on authenticating to AD via NTLMv2

2013-03-26 Thread Phil Mayers
On 26/03/2013 15:00, Phil Mayers wrote: You should ask on the Samba lists - if a windows domain member can do it, there must be a newer API/RPC which Samba could implement. In fact, a couple of minutes with google gives me this thread:

Re: definitive info on authenticating to AD via NTLMv2

2013-03-26 Thread Phil Mayers
On 26/03/2013 15:09, Phil Mayers wrote: On 26/03/2013 15:00, Phil Mayers wrote: You should ask on the Samba lists - if a windows domain member can do it, there must be a newer API/RPC which Samba could implement. In fact, a couple of minutes with google gives me this thread:

Re: definitive info on authenticating to AD via NTLMv2

2013-03-26 Thread Alex Sharaz
Phew! o.k. many thanks for this phil. I'll probably have a bash at this but, as I've done it before, just setting up radiator as something that just says yes/no sounds a lot easier :-)) Rgds Alex On 26 Mar 2013, at 15:27, Phil Mayers p.may...@imperial.ac.uk wrote: On 26/03/2013 15:09, Phil

Re: definitive info on authenticating to AD via NTLMv2

2013-03-26 Thread Alan DeKok
Alex Sharaz wrote: o.k. many thanks for this phil. I'll probably have a bash at this but, as I've done it before, just setting up radiator as something that just says yes/no sounds a lot easier :-)) I doubt it. The problem is with AD, not with any RADIUS server. And that the ntlmv2

Re: definitive info on authenticating to AD via NTLMv2

2013-03-26 Thread Alex Sharaz
On 26 Mar 2013, at 15:00, Phil Mayers p.may...@imperial.ac.uk wrote: On 26/03/2013 14:21, Alex Sharaz wrote: Hi., I've been running ntlm_auth to authenticate our 802.1x users against AD for a number of months without problems…… until this morning when our Systems group tightened up auth

Re: definitive info on authenticating to AD via NTLMv2

2013-03-26 Thread Alex Sharaz
On 26 Mar 2013, at 15:47, Alan DeKok al...@deployingradius.com wrote: Alex Sharaz wrote: o.k. many thanks for this phil. I'll probably have a bash at this but, as I've done it before, just setting up radiator as something that just says yes/no sounds a lot easier :-)) I doubt it.

Re: definitive info on authenticating to AD via NTLMv2

2013-03-26 Thread Alan DeKok
Alex Sharaz wrote: Well, I was running Radiator for a couple of years authenticating users against AD. Yes... I didn't say that wouldn't work. ( sent out a snippet from the Radiator manual in another message) so I guess it wasn't using ntlm. The text you posted showed it used ntlm.

Re: definitive info on authenticating to AD via NTLMv2

2013-03-26 Thread A . L . M . Buxey
Hi, o.k. many thanks for this phil. I'll probably have a bash at this but, as I've done it before, just setting up radiator as something that just says yes/no sounds a lot easier :-)) RADIATOR on Windows can use AuthBY LSA which is a direct access to AD method and doesnt use SAMBA stuff at

Re: definitive info on authenticating to AD via NTLMv2

2013-03-26 Thread Phil Mayers
On 26/03/2013 18:03, a.l.m.bu...@lboro.ac.uk wrote: Hi, o.k. many thanks for this phil. I'll probably have a bash at this but, as I've done it before, just setting up radiator as something that just says yes/no sounds a lot easier :-)) RADIATOR on Windows can use AuthBY LSA which is a