Line 1... |
Line 1... |
1 |
# -*- text -*-
|
1 |
# -*- text -*-
|
2 |
#
|
2 |
#
|
3 |
# $Id$
|
3 |
# $Id: 9e016a09a158f55bbc9b48876f0cb2b776b4cd96 $
|
4 |
|
4 |
|
5 |
# Microsoft CHAP authentication
|
5 |
# Microsoft CHAP authentication
|
6 |
#
|
6 |
#
|
7 |
# This module supports MS-CHAP and MS-CHAPv2 authentication.
|
7 |
# This module supports MS-CHAP and MS-CHAPv2 authentication.
|
8 |
# It also enforces the SMB-Account-Ctrl attribute.
|
8 |
# It also enforces the SMB-Account-Ctrl attribute.
|
Line 61... |
Line 61... |
61 |
# In that case, the mschap module will look at the User-Name
|
61 |
# In that case, the mschap module will look at the User-Name
|
62 |
# attribute, and do prefix/suffix checks in order to obtain
|
62 |
# attribute, and do prefix/suffix checks in order to obtain
|
63 |
# the "best" user name for the request.
|
63 |
# the "best" user name for the request.
|
64 |
#
|
64 |
#
|
65 |
# ntlm_auth = "/path/to/ntlm_auth --request-nt-key --username=%{%{Stripped-User-Name}:-%{%{User-Name}:-None}} --challenge=%{%{mschap:Challenge}:-00} --nt-response=%{%{mschap:NT-Response}:-00}"
|
65 |
# ntlm_auth = "/path/to/ntlm_auth --request-nt-key --username=%{%{Stripped-User-Name}:-%{%{User-Name}:-None}} --challenge=%{%{mschap:Challenge}:-00} --nt-response=%{%{mschap:NT-Response}:-00}"
|
- |
|
66 |
|
- |
|
67 |
# The default is to wait 10 seconds for ntlm_auth to
|
- |
|
68 |
# complete. This is a long time, and if it's taking that
|
- |
|
69 |
# long then you likely have other problems in your domain.
|
- |
|
70 |
# The length of time can be decreased with the following
|
- |
|
71 |
# option, which can save clients waiting if your ntlm_auth
|
- |
|
72 |
# usually finishes quicker. Range 1 to 10 seconds.
|
- |
|
73 |
#
|
- |
|
74 |
# ntlm_auth_timeout = 10
|
66 |
|
75 |
|
67 |
# For Apple Server, when running on the same machine as
|
76 |
# For Apple Server, when running on the same machine as
|
68 |
# Open Directory. It has no effect on other systems.
|
77 |
# Open Directory. It has no effect on other systems.
|
69 |
#
|
78 |
#
|
70 |
# use_open_directory = yes
|
79 |
# use_open_directory = yes
|