Update on Samba and PEAP Machine Authentication

2005-12-05 Thread Michael Griego
The Samba team has recently released Samba version 3.0.21rc2. The 3.0.21 releases include the necessary fixes to Samba to allow for PEAP machine authentication, so those versions of Samba can be used without requiring the patches previously posted to the list. --Mike - List info/subscribe

Re: PEAP Machine Authentication

2005-11-14 Thread Michael Griego
Is your machine truly a member of your AD domain? If so, it's not sending a fully qualified domain name for some reason. Therefore the code is setting the domain to the same as the machine name. I've only ever seen Windows send *just* the machine name without the domain name when the machine

PEAP Machine Authentication

2005-11-14 Thread Jérémy Cluzel
Hi, I'm trying to set a PEAP Authentication with the rlm_mschap.c / cli_netlogon.c hacks provided by M. Griego. The user auth still working (as before), but the computer still not... (a copy of the debug log. is in attachement) According to the log, the rlm_mschap seems to be effective, but i

Re: PEAP Machine Authentication

2005-10-21 Thread Michael Griego
The second function is the one you want to change... rpccli_netlogon_sam_network_logon. On line 803, change it from: 0, /* param_ctrl */ to: 0x800, /* param_ctrl */ --Mike Jérémy Cluzel wrote: Hi, I looked in the samba 3.0.20 source code and I only found 2 calls to the "init_id_info2()"

PEAP Machine Authentication

2005-10-21 Thread Jérémy Cluzel
Hi, I looked in the samba 3.0.20 source code and I only found 2 calls to the "init_id_info2()" function in the "samba/source/rpc_client/cli_netlogon.c" file: In the "cli_netlogon_sam_logon()" function: 701 init_id_info2(&ctr.auth.id2, lp_workgroup(), 702

PEAP Machine Authentication

2005-10-19 Thread Michael Griego
I'm happy to announce that 802.1x/PEAP machine authentication with the Windows built in supplicant is now possible using FreeRADIUS. In the past, machine authentication was only possible by proxying machine authentication requests to another RADIUS server capable of handling them, such a