Hi,
I am new to FreeRADIUS. I would like to set up FreeRADIUS, such that the AS proxies the Kerberos authentication request from the access point to the Kerberos KDC and the access point grants access to the wired network upon successful authentication.
can the AP do kerberos? if so, why the RADIUS? what you probably mean is that you will take a user/pass from a client as their login - PAP/captive portal? or EAP-TTLS/PAP ? what rlm_krb5 is take those details and use the system kerberos (eg stuff all done via /etc/krb5.conf etc) so auth against your kerberos KDC system - MS AD or whatever it is. so long as your krb5 environment is fine - eg 'kinit someuser' works, then rlm_krb5 does its job very well thanks - we've got 3 different installations doing that alan