31 May
2005
31 May
'05
1:08 p.m.
Arne =?utf-8?q?G=C3=B6tje?= (=?utf-8?q?=E9=AB=98=E7=9B=9B=E8=8F=AF?=)" <arne@linux.org.tw> wrote:
I'm trying to authenticate users against a Windows AD server using the krb5 module... but due to missing documentation on how to do this, I'm stuck.
The rlm_krb5 module takes a clear-text password from a RADIUS packet, and uses it to authenticate via kerberos. This may work against AD, but I don't think anyone has tried it.
When I try to get a Kerberos ticket using kinit on the radius machine, it works. But when I try to use the krb5 module, it always gives me a Reject...
Run the server in debugging mode, and post the output here. Alan DeKok.