>>> >>> Is there a way for me to use pap with users stored in Active Directory? >> >> Yes. If you followed AD integration document you have already done that. >> Now, the best way to integrate that with accounts stored elsewhere >> (files, >> sql, ldap, etc.) is to create failover after pap in authorize section of >> default virtual server (instead of forcing it in users file): >> >> if(!Auth-Type) { >> update control { >> Auth-Type = "ntlm_auth" >> } >> } >> > > Awesome. Thank you that worked like a charm! >
It should be if(!control:Auth-Type). I have added the guide for combining AD accounts with accounts stored elsewhere to freeradius wiki: http://wiki.freeradius.org/Combining_authentication_of_AD_accounts_%28ntlm_auth%29_with_accounts_stored_elsewhere Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html