802.1x authentification issue (freeradius+activedirectory)

Hello,

I set up an anthentication method with the following architecture:

Client (windows xp or vista ) ==> Cisco switch ==> freeradius (version 2.0.5) ==> winbind ==> Samba ==> active directory (windows 2003).

Working like a charm when users logs with their login and pass, anyway they have to ID twice.
First one for 802.1x and another for domain or there is an issue when AD password is changed.

Therefore i would like to know how to identify the computer (which is known by AD aswell) rather than  the user.
I guess i have to tweak up the following lines in radiusd.conf:

ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --username=%{Stripped-User-Name:-%{User-Name:-None}} --challenge=%{mschap:Challenge:-00} -$

Or maybe there is an opensource supplicant software around that could bind both authentifications.

Thanks by advance for any advice.

Regards,
Start Free Trial