(RADIATOR) Group and NT Auth

[Kent, Ashley]

> How do you make sure a user belong to a certain group in NT 
Here's how my setup works:

authentication request handler --> Authby FILE --> Authby NT

The Authby FILE specifies which <Authby NT>  clause to call and passes the
name of the nt group to that clause.
eg. If I want to use the authby nt clause called CheckInfprd04NT and I want
the user to be a member of the group Rad-Int, then the contents of the file
named
in the authby file clause would be:
DEFAULT Auth-Type=CheckInfprd04NT, Group = Rad-Int


This method can provide a lot of flexibility. You can use it to ensure
different subsets of your users belong to different nt usergroups. If you
need this level of complexity then a small amount of consulting from one of
the OSC guys would be very worthwhile.

As for the problem you are having with user passwords being rejected, make
sure you are running version 2.18.1 or later. Major improvements to authby
nt were made at that release.




hth,


Ash Kent
Network Security Engineer
United Energy Australia
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.