FreeRadius with Active DIR - Access by being in a group in active dir

Eric Lovrien Eric at mixeduperic.com
Wed Jun 1 03:56:27 CEST 2011


This afternoon I amde the changes as you suggested and it worked like a
charm. Thank you !!!!

Eric




On Tue, May 31, 2011 at 2:33 PM, Gary Gatten <Ggatten at waddell.com> wrote:

>  Check out the command options of ntlm_auth: --require-membership-of.  If
> group name doesn’t work, try the SID of the group.
>
>
>
> G
>
>
>
>
>  ------------------------------
>
> *From:* freeradius-users-bounces+ggatten=waddell.com at lists.freeradius.org[mailto:
> freeradius-users-bounces+ggatten=waddell.com at lists.freeradius.org] *On
> Behalf Of *Eric Lovrien
> *Sent:* Tuesday, May 31, 2011 2:27 PM
> *To:* freeradius-users at lists.freeradius.org
> *Subject:* FreeRadius with Active DIR - Access by being in a group in
> active dir
>
>
>
> I have gotten freeradius up and going and authenicating to Active
> directory  by using the following how to:
> http://deployingradius.com/documents/configuration/active_directory.html.
> I am using ntlm_auth to authenicate the users agaist Active Directory. The
> question i have is, is there a way I can create a group in Active Directory
> and have only users in that group have access to authenicate?
>
> Basically what I am doing or trying to do is use freeradius to authenicate
> users for wireless access. I don't want every one to have access that is in
> Active Dir. I would like to create a group called wifi or something similar
> and put users in that group that are allowed to authnicate. Is this possible
> using ntlm_auth and if so could some one point me in the direction on
> getting this set up. Thanks in advance!
>
> Eric
>   "This email is intended to be reviewed by only the intended recipient
> and may contain information that is privileged and/or confidential. If you
> are not the intended recipient, you are hereby notified that any review,
> use, dissemination, disclosure or copying of this email and its attachments,
> if any, is strictly prohibited. If you have received this email in error,
> please immediately notify the sender by return email and delete this email
> from your system."
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20110531/e3cfcb71/attachment.html>


More information about the Freeradius-Users mailing list