Re: ntlm_auth - No logon workstation trust account

2012-10-19 Thread Bryce Mackintosh
). > > > On Fri, Oct 19, 2012 at 1:49 PM, Bryce Mackintosh wrote: > >> Hi, >> >> I've been trying to get machine auth working for a good while and I'm >> currently stuck trying to figure out why ntlm_auth is returning "No logon >> wor

ntlm_auth - No logon workstation trust account

2012-10-19 Thread Bryce Mackintosh
Hi, I've been trying to get machine auth working for a good while and I'm currently stuck trying to figure out why ntlm_auth is returning "No logon workstation trust account (0xc199)". I've double checked AD and the account definitely exists, and the machine has no problem logging into the dom

Re: Restricting users to AD domain computers

2012-10-11 Thread Bryce Mackintosh
On 11 October 2012 14:48, Phil Mayers wrote: > On 11/10/12 12:55, Bryce Mackintosh wrote: > > >> Okay, ignoring how I currently have things setup, how would other people >> go about controlling the users and devices on a wifi network by means of >> 802.1x, freeradius

Re: Restricting users to AD domain computers

2012-10-11 Thread Bryce Mackintosh
On 11 October 2012 11:45, Phil Mayers wrote: > On 11/10/12 11:03, Bryce Mackintosh wrote: > >> Hi, >> >> I'm currently using FreeRadius to control access to our wifi network >> with PEAP-TLS, and authenticating users against their AD accounts. I now >>

Restricting users to AD domain computers

2012-10-11 Thread Bryce Mackintosh
Hi, I'm currently using FreeRadius to control access to our wifi network with PEAP-TLS, and authenticating users against their AD accounts. I now need to somehow additionally restrict the users wifi access to only the machines that are joined to the Windows domain, and not phones, ipads, etc, and