Developers guide

Chapter 5

Configuration 29

mschap {

use_mppe = yes

require_encryption = yes

require_strong = yes

with_ntdomain_hack = yes

ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --username=%{%{Stripped-

User-Name}:-%{mschap:User-Name:-None}} --challenge=%{mschap:Challenge:-00} --nt-

response=%{mschap:NT-Response:-00}"

}

Samba / Kerberos / Winbind

Install Samba 3 and NOT Samba 4. You can either use the sources or use the package for your OS. For

RHEL/CentOS, do:

yum install samba krb5-workstation

For Debian and Ubuntu, do:

apt-get install samba winbind krb5-user

Note

If you have Windows 7 PCs in your network, you need to use Samba version 3.5.0 (or

greater).

When done with the Samba install, modify your /etc/hosts in order to add the FQDN of your Active

Directory servers. Then, you need to modify /etc/krb5.conf. Here is an example for the DOMAIN.NET

domain for Centos/RHEL: