> Do you have any ideas about getting chilispot to work with users who > are retrieved from AD via winbind and ntlm_auth
I don't know Chilispot, but if it can pass a cleartext password, then you can use ntlm_auth in a script to do the authentication. For other devices that send an A/D user and a cleartext password in User-Password, I use ldap in the authorization section and then: Auth-Type ldap { perl_ntlm } In the authentication section after ms-chap and eap. In the script you call ntlm_auth and parse the response. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html