Re: FreeRADIUS for VLAN-assignment & auth. via WinNT-PDC

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


| EAP/MD5 is the only way for WinNT as far as I know. MD5 hash is
transferred
| over the net, so no plaintext passwords on the line.
Seems i misunderstood the method - so EAP-MD5 will work fine for me :-)

| SMB experimental yes.
I'll give it a try.

| Well, I could not imagine how WinNT could deliver VLANs since these
| information is not stored in WinNT user profiles. Perhaps you have to use
| realms to link user groups to VLANs. Only the username part is
forwarded to
| WinNT. The username could look like username@vlan-group.

Would'nt this be insecure ? The users would be able to define themselves
which VLAN they join - if i understand you correctly. This is not
intended. Even though, how do i tell FreeRADIUS to strip the
"@vlan-group"-part of the username and use it as VLAN-Identifier ?


Greetings
~ Mark Wasmer
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (MingW32)
Comment: GnuPT-Light 0.2 by EQUIPMENTE.DE
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD4DBQFCOHdNrUtz+gVmmXsRAvHuAJjAmW+Q5eI7fQ5bznB0IA oZqujjAJ9hpxyB
h5FmlRmsEt7qpmJLYQfCTw==
=x9RK
-----END PGP SIGNATURE-----

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html