Am 13.02.2010 08:21, schrieb Alan DeKok:
Moe D. wrote:
I got a machine up and running Freeradius 2.1.0 with SSL support to secure a Wireless LAN. In our school’s network we (have to) use an Apple Mac OS X 10.4 Server with Samba as the PDC. Samba stores the user information using the OpenDirectory on the same server – using the NTLM password hashes… so far, there should be no problem for Freeradius using LDAP to connect to the OD an retrieve the NTLM hash to authenticate the wireless clients.
Use the "mschap" module. Apple has contributed code to make FreeRADIUS work with Open Directory.
Edit the "mschap" configuration, and add:
use_open_directory = yes
That's it.
You may need to use a more recent version of FreeRADIUS. I suggest 2.1.8.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Wow, that sounds great. I haven't read about the use_open_directory option yet. Do I have to configure the mschap-module to connect to the OD, since Freeradius is not running on the Apple server? E.g. specify the server adress? Or does it find the server automatically? Thanks four your help so far, Alan! moenster