I you recommend to use kerberos (or ntlm) and ldap only for the group memberships, But i cant speak for you so i suggest, read the links below, use what you need. http://deployingradius.com/documents/configuration/active_directory.html or https://wiki.samba.org/index.php/Authenticating_Freeradius_against_Active_Di... And/or ! Note, the setting shown in the 2 above links need still to be applied in the one below. https://wiki.samba.org/index.php/VPN_Single_SignOn_with_Samba_AD Greetz, Louis
-----Oorspronkelijk bericht----- Van: Freeradius-Users [mailto:freeradius-users-bounces+belle=bazuin.nl@lists.freerad ius.org] Namens ?????????????? ???????????????? ?????????????????? via Freeradius-Users Verzonden: maandag 3 augustus 2020 15:49 Aan: FreeRadius users mailing list CC: ?????????????? ???????????????? ?????????????????? Onderwerp: Re: MSCHAPV2 + OpenLDAP
Thanks. Maybe I need to configure the MSCHAP freeradius module for OpenLDAP authentication. I haven't figured out how yet ) The ldap module is configured correctly
3 ??????. 2020 ??., ?? 16:42, Gregory Sloop <gregs@sloop.net<mailto:gregs@sloop.net>> ??????????????(??):
Top posting. I don't use/involve freeradius for VPN on the Mac, but I certainly use MSChapv2 {with L2TP]. The native L2TP client on the Mac DOES NOT require Active Directory.
I suspect you have some other problem.
??!vFU> It turns out that the vpn client macos only works with Active ??!vFU> Directory ? So Apple depends on Windows ? This is vendor lock )
3 ??????. 2020 ??., ?? 16:24, Sven Hartge <sven@svenhartge.de<mailto:sven@svenhartge.de>> ??????????????(??):
On 03.08.20 15:04, ?????????????? ???????????????? ?????????????????? via Freeradius-Users wrote:
I am trying to configure authentication via freeradius client VPN. Users in OpenLDAP . The problem is that the standard MacOS vpn client works via ms chap v2 (in the debut mode, I see the Client is using MS-CHAPv2). I would be grateful for help if someone had experience setting up in this configuration.
Please read
http://deployingradius.com/documents/protocols/compatibility.h tml<http://deployingradius.com/documents/protocols/compatibili ty.html> first
to see if the way the password is stored in OpenLDAP is compatible with MS-CHAP.
(Odds are, it isn't.)
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html