21 Jan
2014
21 Jan
'14
1:44 p.m.
Hi Am 21.01.2014 19:11, schrieb David Aldwinckle:
The radiusd process can¹t read the response from winbind.
http://wiki.freeradius.org/guide/FreeRADIUS-Active-Directory-Integration-HO WTO
[...]
setfacl -m u:radiusd:rx winbindd_privileged
Or something similar. See http://www.suse.de/~agruen/acl/linux-acls/online/ or man setfacl for more information on POSIX ACLs!"
I remember being in that situation on my first setup with FreeRADIUS. Actually is there something wrong (on Debian and alikes) to simply add the user freerad to the winbindd_privileged group or is there a security risk I don't realize in contrast to setfacl? -- Mat