<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<meta name=ProgId content=Word.Document>
<meta name=Generator content="Microsoft Word 10">
<meta name=Originator content="Microsoft Word 10">
<link rel=File-List href="cid:filelist.xml@01C6729D.36A717B0">
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:DoNotRelyOnCSS/>
</o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:SpellingState>Clean</w:SpellingState>
<w:GrammarState>Clean</w:GrammarState>
<w:DocumentKind>DocumentEmail</w:DocumentKind>
<w:EnvelopeVis/>
<w:Compatibility>
<w:ApplyBreakingRules/>
<w:UseFELayout/>
</w:Compatibility>
<w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
</w:WordDocument>
</xml><![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;
mso-font-charset:2;
mso-generic-font-family:decorative;
mso-font-pitch:variable;
mso-font-signature:0 268435456 0 0 -2147483648 0;}
@font-face
{font-family:"MS Mincho";
panose-1:2 2 6 9 4 2 5 8 3 4;
mso-font-alt:"\,l\,r \\?fc";
mso-font-charset:128;
mso-generic-font-family:roman;
mso-font-pitch:variable;
mso-font-signature:-1610612033 1757936891 16 0 131231 0;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;
mso-font-charset:0;
mso-generic-font-family:swiss;
mso-font-pitch:variable;
mso-font-signature:553679495 -2147483648 8 0 66047 0;}
@font-face
{font-family:"\@MS Mincho";
panose-1:0 0 0 0 0 0 0 0 0 0;
mso-font-charset:128;
mso-generic-font-family:roman;
mso-font-format:other;
mso-font-pitch:variable;
mso-font-signature:1 134676480 16 0 131072 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-parent:"";
margin:0in;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"MS Mincho";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;
text-underline:single;}
span.EmailStyle17
{mso-style-type:personal-reply;
mso-style-noshow:yes;
mso-ansi-font-size:10.0pt;
mso-bidi-font-size:10.0pt;
font-family:Arial;
mso-ascii-font-family:Arial;
mso-hansi-font-family:Arial;
mso-bidi-font-family:Arial;
color:navy;}
span.SpellE
{mso-style-name:"";
mso-spl-e:yes;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;
mso-header-margin:.5in;
mso-footer-margin:.5in;
mso-paper-source:0;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";}
</style>
<![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple style='tab-interval:.5in'>
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Yes you can do use the <span class=SpellE>ldap</span>
module of <span class=SpellE>freeradius</span> to hit your AD, I am doing this
now.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Yes you can do <span class=SpellE>ssl/tls</span>
for encryption between the radius server and AD.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Windows server 2000 does not support <span
class=SpellE>tls</span>, only <span class=SpellE>ssl</span>.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>It is similar to setting up <span
class=SpellE>mm_mod_auth_ldap</span> for apache.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>You will need an <span class=SpellE>ldap</span>
browser to browse your domain to find out the correct search filters for
everything.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>The only thing I can’t figure out is
how to check for group membership.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>I posted to the mailing list, but no one
has responded yet </span></font><font size=2 color=navy face=Wingdings><span
style='font-size:10.0pt;font-family:Wingdings;mso-ascii-font-family:Arial;
mso-hansi-font-family:Arial;mso-bidi-font-family:Arial;color:navy;mso-char-type:
symbol;mso-symbol-font-family:Wingdings'><span style='mso-char-type:symbol;
mso-symbol-font-family:Wingdings'>L</span></span></font><font size=2
color=navy face=Arial><span style='font-size:10.0pt;font-family:Arial;
color:navy'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>There is good documentation on the <span
class=SpellE>wiki</span>.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Look for my previous post about not
getting groups working to see my <span class=SpellE>config</span> files.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<div>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy;mso-no-proof:yes'>--</span></font><font
color=navy><span style='color:navy;mso-no-proof:yes'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=1 color=navy face=Arial><span style='font-size:
8.0pt;font-family:Arial;color:navy;mso-no-proof:yes'><st1:PersonName>Chris
Liles</span></font><font size=1 color=navy><span style='font-size:8.0pt;
color:navy;mso-no-proof:yes'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=1 color=navy face=Arial><span style='font-size:
8.0pt;font-family:Arial;color:navy;mso-no-proof:yes'></st1:PersonName>System
Analyst</span></font><font size=1 color=navy><span style='font-size:8.0pt;
color:navy;mso-no-proof:yes'><o:p></o:p></span></font></p>
<p class=MsoNormal><b><font size=1 color=navy face=Arial><span
style='font-size:8.0pt;font-family:Arial;color:navy;font-weight:bold;
mso-no-proof:yes'>Air2Web, Inc.</span></font></b><font size=1 color=navy><span
style='font-size:8.0pt;color:navy;mso-no-proof:yes'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=1 color=navy face=Arial><span style='font-size:
8.0pt;font-family:Arial;color:navy;mso-no-proof:yes'><st1:Street><st1:address>1230
Peachtree St. N.E.</span></font><font size=1 color=navy><span style='font-size:
8.0pt;color:navy;mso-no-proof:yes'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=1 color=navy face=Arial><span style='font-size:
8.0pt;font-family:Arial;color:navy;mso-no-proof:yes'><st1:Street><st1:address></st1:address></st1:Street></st1:address></st1:Street>12th
Floor</span></font><font size=1 color=navy><span style='font-size:8.0pt;
color:navy;mso-no-proof:yes'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=1 color=navy face=Arial><span style='font-size:
8.0pt;font-family:Arial;color:navy;mso-no-proof:yes'><st1:place><st1:City>Atlanta</st1:City>,
<st1:State>GA</st1:State> <st1:PostalCode>30309</span></font><font size=1
color=navy><span style='font-size:8.0pt;color:navy;mso-no-proof:yes'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=1 color=navy face=Arial><span style='font-size:
8.0pt;font-family:Arial;color:navy;mso-no-proof:yes'><st1:place><st1:PostalCode></st1:PostalCode></st1:place></st1:PostalCode></st1:place>Tel:
(404) 942-5334</span></font><font size=1 color=navy><span style='font-size:
8.0pt;color:navy;mso-no-proof:yes'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=1 color=navy face=Arial><span style='font-size:
8.0pt;font-family:Arial;color:navy;mso-no-proof:yes'>Fax: (404) 815-7708<o:p></o:p></span></font></p>
</div>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='margin-left:.5in'><font size=2 face=Tahoma><span
style='font-size:10.0pt;font-family:Tahoma'>-----Original Message-----<br>
<b><span style='font-weight:bold'>From:</span></b> freeradius-users-bounces+chris.liles=air2web.com@lists.freeradius.org
[mailto:freeradius-users-bounces+chris.liles=air2web.com@lists.freeradius.org] <b><span
style='font-weight:bold'>On Behalf Of </span></b>Frank Smith<br>
<b><span style='font-weight:bold'>Sent:</span></b> Monday, May 08, 2006 11:55
AM<br>
<b><span style='font-weight:bold'>To:</span></b>
freeradius-users@lists.freeradius.org<br>
<b><span style='font-weight:bold'>Subject:</span></b> win2003 Active Directory
authentication</span></font></p>
<p class=MsoNormal style='margin-left:.5in'><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='margin-left:.5in'><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>I am running AD in native mode. By my ancient
understanding of samba, I cannot join this domain. I can authenticate
using ldap, no? Also, is this insecure due to clear text? Any
other ideas for what I want here?<br>
<br>
Thanks!<o:p></o:p></span></font></p>
</div>
</body>
</html>