<div dir="ltr"><br><br>
<div class="gmail_quote">On Tue, Apr 27, 2010 at 1:17 AM, John Dennis <span dir="ltr"><<a href="mailto:jdennis@redhat.com">jdennis@redhat.com</a>></span> wrote:<br>
<blockquote style="BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0px 0px 0.8ex; PADDING-LEFT: 1ex" class="gmail_quote">
<div class="im">On 04/26/2010 05:33 PM, <a href="mailto:Eric.Hernandez@allegiantair.com" target="_blank">Eric.Hernandez@allegiantair.com</a> wrote:<br>
<blockquote style="BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0px 0px 0.8ex; PADDING-LEFT: 1ex" class="gmail_quote">I see thats what I thought, I also confirmed its all clear text with<br>tcpdump.<br><br>If I were to switch my backend to an ldap system would I have encrypted<br>
traffic for user authentication with freeradius remote ldap/backend setup?<br></blockquote></div></blockquote>
<div> </div>
<div> </div>
<div>Or you could probably tunnel the traffic via SSH or some other encrypted medium.</div>
<div>Given this will add overhead though I don't know to say how much in compared to other solutions,</div>
<div>depending on your deployment I guess.</div>
<div> </div>
<div> </div>
<div> </div>
<div>Regards,</div>
<div>Liran Tal.</div>
<div> </div>
<div> </div>
<div> </div>
<div> </div>
<div> </div>
<blockquote style="BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0px 0px 0.8ex; PADDING-LEFT: 1ex" class="gmail_quote">Not currently, but I've got a patch for the 1.1.7 version of rlm_ldap, so it might need some tweaking for 2.x
<div class="im"><br><br>
<blockquote style="BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0px 0px 0.8ex; PADDING-LEFT: 1ex" class="gmail_quote"><br>Also is there a nas/radacct table equivalent in the ldap solution or is<br>it strictly for user authentication?<br>
</blockquote><br></div>Not currently, but I've got a patch for the 1.1.7 version of rlm_ldap, so it might need some tweaking for 2.x<br><br>FWIW, I don't have extra cycles at the moment.<br><br>BTW, patching rlm_sql_mysql to use SSL wouldn't be hard.
<div>
<div></div>
<div class="h5"><br><br>-- <br>John Dennis <<a href="mailto:jdennis@redhat.com" target="_blank">jdennis@redhat.com</a>><br><br>Looking to carve out IT costs?<br><a href="http://www.redhat.com/carveoutcosts/" target="_blank">www.redhat.com/carveoutcosts/</a><br>
-<br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br></div></div></blockquote></div><br></div>