(freeradius 3) I'm trying to integrate freeradius with active directory in cenos 7.

Wed Sep 21 14:54:36 CEST 2016

>I think all is working, but I don't know how to test freeradius with active
>directory users on localhost (radius server)

I think you might want to check first (following the how-to on the main
page):

   1. if ntlm_auth / or wbinfo is working fine
   2. then just start radius in debugging mode and test with a live AD user.

Just my 2 cents,

Regards,

v4s[at]#unrelated | "sh3ll is just the beginning"

On Wed, Sep 21, 2016 at 3:47 PM, Marcelo Martinez <
marcelo.martinez at nexa.com.uy> wrote:

> Hello,
>
> Thanks alan and other users for the help.
> I think all is working, but I don't know how to test freeradius with active
> directory users on localhost (radius server)

Sorry for the dumb question.
>
> Any help please?
>
> Thanks.-
>
> On Mon, Sep 19, 2016 at 5:12 PM, Marcelo Martinez <
> marcelo.martinez at nexa.com.uy> wrote:
>
> > I fixed the issue with radtest.
> >
> > # radtest bob hello 127.0.0.1 0 testing123
> > Sending Access-Request Id 154 from 0.0.0.0:47029 to 127.0.0.1:1812
> > User-Name = 'bob'
> > User-Password = 'hello'
> > NAS-IP-Address = 192.168.72.22
> > NAS-Port = 0
> > Message-Authenticator = 0x00
> > Received Access-Accept Id 154 from 127.0.0.1:1812 to 127.0.0.1:47029
> > length 20
> >
> > Thanks.-
> >
> > On Mon, Sep 19, 2016 at 4:58 PM, Marcelo Martinez <
> > marcelo.martinez at nexa.com.uy> wrote:
> >
> >> winbind is running
> >>
> >> # systemctl status winbind
> >> ● winbind.service - Samba Winbind Daemon
> >>    Loaded: loaded (/usr/lib/systemd/system/winbind.service; disabled;
> >> vendor preset: disabled)
> >>    Active: active (running) since lun 2016-09-19 16:39:35 UYT; 4min 43s
> >> ago
> >>  Main PID: 4752 (winbindd)
> >>    Status: "winbindd: ready to serve connections..."
> >>    CGroup: /system.slice/winbind.service
> >>            ├─4752 /usr/sbin/winbindd
> >>            └─4753 /usr/sbin/winbindd
> >>
> >> sep 19 16:39:35 prueba systemd[1]: Starting Samba Winbind Daemon...
> >> sep 19 16:39:35 prueba winbindd[4752]: [2016/09/19 16:39:35.538056,  0]
> >> ../source3/winbindd/winbindd_cache.c:3235(initialize_winbindd_cache)
> >> sep 19 16:39:35 prueba winbindd[4752]:   initialize_winbindd_cache:
> >> clearing cache and re-creating with version number 2
> >> sep 19 16:39:35 prueba winbindd[4752]: [2016/09/19 16:39:35.542982,  0]
> >> ../lib/util/become_daemon.c:124(daemon_ready)
> >> sep 19 16:39:35 prueba winbindd[4752]:   STATUS=daemon 'winbindd'
> >> finished starting up and ready to serve connections
> >> sep 19 16:39:35 prueba systemd[1]: Started Samba Winbind Daemon.
> >>
> >> My progress is fine...
> >>
> >> wbinfo -a Administrador%Passw0rd
> >> plaintext password authentication failed
> >> Could not authenticate user Administrador%Passw0rd with plaintext
> password
> >> challenge/response password authentication succeeded
> >> [root at miem-radius-test raddb]# ntlm_auth --request-nt-key --domain=TEST
> >> --username=Administrador --password=Passw0rd
> >> NT_STATUS_OK: Success (0x0)
> >>
> >> but radtest is not working...
> >>
> >> radtest -t mschap bob hello localhost 0 testing123
> >> -bash: radtest: command not found
> >>
> >> yum provides radtest
> >> Complementos cargados:ps
> >> miemrepo-base
> >>                                               | 3.6 kB  00:00:00
> >> miemrepo-epel
> >>                                               | 4.3 kB  00:00:00
> >> miemrepo-base/filelists_db
> >>                                                | 6.2 MB  00:00:00
> >> miemrepo-epel/filelists_db
> >>                                                | 7.1 MB  00:00:00
> >> freeradius-utils-3.0.4-6.el7.x86_64 : FreeRADIUS utilities
> >> Repositorio        : testrepo-base
> >> Resultado obtenido desde:
> >> Nombre del archivo    : /usr/bin/radtest
> >>
> >>
> >>
> >> On Mon, Sep 19, 2016 at 4:34 PM, Matthew Newton [via FreeRADIUS] <
> >> ml-node+s1045715n5742624h28 at n5.nabble.com> wrote:
> >>
> >>> On Mon, Sep 19, 2016 at 03:33:02PM -0300, Marcelo Martinez wrote:
> >>> > Any help please?
> >>>
> >>> As per my last e-mail...
> >>>
> >>> Is winbind running?
> >>>
> >>> Matthew
> >>>
> >>>
> >>> --
> >>> Matthew Newton, Ph.D. <[hidden email]
> >>> <http:///user/SendEmail.jtp?type=node&node=5742624&i=0>>
> >>>
> >>> Systems Specialist, Infrastructure Services,
> >>> I.T. Services, University of Leicester, Leicester LE1 7RH, United
> >>> Kingdom
> >>>
> >>> For IT help contact helpdesk extn. 2253, <[hidden email]
> >>> <http:///user/SendEmail.jtp?type=node&node=5742624&i=1>>
> >>> -
> >>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list
> >>> /users.html
> >>>
> >>> ------------------------------
> >>> If you reply to this email, your message will be added to the
> discussion
> >>> below:
> >>> http://freeradius.1045715.n5.nabble.com/freeradius-3-I-m-try
> >>> ing-to-integrate-freeradius-with-active-directory-in-cenos-
> >>> 7-tp5742598p5742624.html
> >>> To unsubscribe from FreeRADIUS, click here
> >>> <http://freeradius.1045715.n5.nabble.com/template/
> NamlServlet.jtp?macro=unsubscribe_by_code&node=2740692&code=
> bWFyY2Vsby5tYXJ0aW5lekBuZXhhLmNvbS51eXwyNzQwNjkyfC0xNzQ0NzUzNjYy>
> >>> .
> >>> NAML
> >>> <http://freeradius.1045715.n5.nabble.com/template/
> NamlServlet.jtp?macro=macro_viewer&id=instant_html%
> 21nabble%3Aemail.naml&base=nabble.naml.namespaces.
> BasicNamespace-nabble.view.web.template.NabbleNamespace-
> nabble.view.web.template.NodeNamespace&breadcrumbs=
> notify_subscribers%21nabble%3Aemail.naml-instant_emails%
> 21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml>
> >>>
> >>
> >>
> >
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html