I have FreeRADIUS (1.0.0-pre2) doing user authentication with W2K AD (peap, mschap, ldap, ntlm_auth); thanks to the archived posts for the help!!
I want to use user authentication for non-domain machines (students, home laptops, etc - done) and machine authentication for those in active directory (our computers). I modified the ldap attribs to check servicePrincipalName (host\computername) but of course the machine doesn't send a password for mschap... Is this something I can do with FreeRADIUS or do I need to look at IAS? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
