"Tom Rixom" <[EMAIL PROTECTED]> wrote: > ntlm_auth seems like a good bet, except I am uncertain if it is > possible to convert the inner EAP-MSCHAPV2 authentication of PEAP > to the normal MSCHAP authentication required by the ntlm_auth module...
The EAP-MSCHAPv2 module already packages the data into MS-CHAP attributes, and calls the mschap module. It's possible to get it to call another module, and have that module do mschap to ntlm_auth conversion/checking. A better solution would be to port the PPPd winbind code to rlm_winbind, but it's not trivial. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html