Re: ntlm_auth child domain

I'd say use ntlm_auth with 2 instances of MSCHAP module - using unlang and fail-through mechanism...so if MSCHAP instance 1 fails then it tries instance 2 We used this mechanism when migrating from one AD to another alan -- This smartphone uses free WiFi around the world with eduroam, now that'

RE: ntlm_auth child domain

Ok, Do you have a handy guide or documentation for that, I’m pretty newb with freeradius. Thank you I'd say use ntlm_auth with 2 instances of MSCHAP module - using unlang and fail-through mechanism...so if MSCHAP instance 1 fails then it tries instance 2 We used this mechanism when migrati

Re: ntlm_auth child domain

Hi, >Do you have a handy guide or documentation for that, I’m pretty newb with >freeradius. man unlang http://wiki.freeradius.org/config/Fail-over alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: ntlm_auth child domain

Hi, Just to update I was able to do what I intended to : Here what I did, In the authenticate of inner-tunnel and default I added this: Auth-Type MS-CHAP { group { mschap { reject = 1 ok = return