RE: Windows Pre-Login Auth

2011-09-10 Thread Scott Hughes
Subject: Re: Windows Pre-Login Auth Once you have Samba and AD talking via winbind, it is pretty straightforward. You can configure all the machines via Group Policy I have used this post, pretty much to the T: http://lists.cistron.nl/pipermail/freeradius-users/2009- March/msg00231.html

Re: Windows Pre-Login Auth

2011-09-10 Thread Arran Cudbard-Bell
I think the line above (in the radius -X output) that reads, [mschap] No MS-CHAP-Challenge in the request may be causing the issue (i.e. - not testing it properly for MS-Chap - sending a cleartext username and password instead of what the MS-Chap module expects?). You hardcoded Auth-Type

RE: Windows Pre-Login Auth

2011-09-10 Thread Scott Hughes
-Original Message- From: Arran Cudbard-Bell [mailto:a.cudba...@freeradius.org] Sent: Saturday, September 10, 2011 11:36 AM To: sc...@renshawauto.net; FreeRadius users mailing list Subject: Re: Windows Pre-Login Auth I think the line above (in the radius -X output) that reads

Re: Windows Pre-Login Auth

2011-09-10 Thread Alan T DeKok
Scott Hughes wrote: Thank you for the reply Arran. Yes, I did hard code the Auth-Type as instructed for test purposes. I commented the hard-coding out and still have the same results as above. See the Wiki for examples of how to configure AD login with FreeRADIUS. See also my web page:

RE: Windows Pre-Login Auth

2011-09-10 Thread Scott Hughes
-Original Message- From: Alan T DeKok [mailto:al...@freeradius.org] Sent: Saturday, September 10, 2011 12:22 PM To: sc...@renshawauto.net; FreeRadius users mailing list Subject: Re: Windows Pre-Login Auth Scott Hughes wrote: Thank you for the reply Arran. Yes, I did hard code

Re: Windows Pre-Login Auth

2011-09-10 Thread Commonn Systems
[mailto:freeradius- users-bounces+scott=renshawauto@lists.freeradius.org] On Behalf Of Commonn Systems Sent: Friday, September 09, 2011 4:54 PM To: freeradius-users@lists.freeradius.org Subject: Re: Windows Pre-Login Auth Once you have Samba and AD talking via winbind, it is pretty straightforward. You can

Re: Windows Pre-Login Auth

2011-09-09 Thread nf-vale
On Windows 7 you can configure pre-login authentication (wireless connection properties - Advanced settings) both for computer and user. On XP (with native windows client), I don't think that it is possible to do that. On Fri, 9 Sep 2011 09:00:32 -0500, Scott Hughes wrote: Hello all, I

Re: Windows Pre-Login Auth

2011-09-09 Thread Phil Mayers
On 09/09/2011 03:00 PM, Scott Hughes wrote: Hello all, I have been using FreeRadius for several years now and am stuck trying to make our Windows based wireless system authenticate PRIOR to user login. I have searched the FreeRadius and Deploying FreeRadius sites as well as Google, but no

Re: Windows Pre-Login Auth

2011-09-09 Thread Phil Mayers
On 09/09/2011 03:21 PM, nf-vale wrote: On Windows 7 you can configure pre-login authentication (wireless connection properties - Advanced settings) both for computer and user. On XP (with native windows client), I don't think that it is possible to do that. This is possible in XP SP3. I can't

RE: Windows Pre-Login Auth

2011-09-09 Thread Scott Hughes
: Windows Pre-Login Auth On 09/09/2011 03:00 PM, Scott Hughes wrote: Hello all, I have been using FreeRadius for several years now and am stuck trying to make our Windows based wireless system authenticate PRIOR to user login. I have searched the FreeRadius and Deploying FreeRadius sites

RE: Windows Pre-Login Auth

2011-09-09 Thread Scott Hughes
: Windows Pre-Login Auth On 09/09/2011 03:21 PM, nf-vale wrote: On Windows 7 you can configure pre-login authentication (wireless connection properties - Advanced settings) both for computer and user. On XP (with native windows client), I don't think that it is possible to do

RE: Windows Pre-Login Auth

2011-09-09 Thread Lovaas,Steven
To: freeradius-users@lists.freeradius.org Subject: Re: Windows Pre-Login Auth On 09/09/2011 03:00 PM, Scott Hughes wrote: Hello all, I have been using FreeRadius for several years now and am stuck trying to make our Windows based wireless system authenticate PRIOR to user login. I have

Re: Windows Pre-Login Auth

2011-09-09 Thread Michael Holstein
On Windows 7 you can configure pre-login authentication (wireless connection properties - Advanced settings) both for computer and user. On XP (with native windows client), I don't think that it is possible to do that. Yes it is .. just check the box for authenticate as computer

RE: Windows Pre-Login Auth

2011-09-09 Thread Scott Hughes
-Original Message- From: Michael Holstein [mailto:michael.holst...@csuohio.edu] Sent: Friday, September 09, 2011 10:23 AM To: FreeRadius users mailing list Cc: sc...@renshawauto.net Subject: Re: Windows Pre-Login Auth On Windows 7 you can configure pre-login authentication (wireless

RE: Windows Pre-Login Auth

2011-09-09 Thread Scott Hughes
-Original Message- From: Michael Holstein [mailto:michael.holst...@csuohio.edu] Sent: Friday, September 09, 2011 10:23 AM To: FreeRadius users mailing list Cc: sc...@renshawauto.net Subject: Re: Windows Pre-Login Auth On Windows 7 you can configure pre-login authentication (wireless

Re: Windows Pre-Login Auth

2011-09-09 Thread Phil Mayers
On 09/09/2011 04:23 PM, Scott Hughes wrote: Also, would it be better to get the AD authentication working BEFORE I attempt to authenticate prior to login or is it the same either way? AD auth is a pre-requisite for machine auth. So yes, it would be better to do that first! (Please make

RE: Windows Pre-Login Auth

2011-09-09 Thread Scott Hughes
Subject: Re: Windows Pre-Login Auth On 09/09/2011 04:23 PM, Scott Hughes wrote: Also, would it be better to get the AD authentication working BEFORE I attempt to authenticate prior to login or is it the same either way? AD auth is a pre-requisite for machine auth. So yes, it would

Re: Windows Pre-Login Auth

2011-09-09 Thread Commonn Systems
Subject: Re: Windows Pre-Login Auth On 09/09/2011 04:23 PM, Scott Hughes wrote: Also, would it be better to get the AD authentication working BEFORE I attempt to authenticate prior to login or is it the same either way? AD auth is a pre-requisite for machine auth. So yes, it would be better

RE: Windows Pre-Login Auth

2011-09-09 Thread Scott Hughes
Subject: Re: Windows Pre-Login Auth Once you have Samba and AD talking via winbind, it is pretty straightforward. You can configure all the machines via Group Policy I have used this post, pretty much to the T: http://lists.cistron.nl/pipermail/freeradius-users/2009- March/msg00231.html