Guys, I configured FreeRadius for Authentication with Active Directory by following the steps as suggested by Alan's deployingradius.com. Everything is working successfully like Samba, Kerberos, ntlm_auth configuration, I can successfully join the domain as an administrator and also user can be authenticated by their credentials successfully. Now I need one suggestion here: Is there any way that administrator be able to read and write the information about user's access privileges by joining the domain. Such as users are allowed/denied for WIFi access, VPN access etc. I don't know whether it is possible or not by confguring anything with Samba/Kerberos/ntlm_auth/FreeRadius or should I need any other program to obtain this goal. I am configuring FreeRadius for the 1st time so, your idea will be greately appreciated. Thanks, Date: Wed, 9 Nov 2011 18:06:16 -0800 From: ml-node+s1045715n4979784h86@n5.nabble.com To: samanaupadhyay@hotmail.com Subject: Re: ldap+freeradius Hi,
*Sorry for the confusion I made. I have put the name of LDAP server accordingly , not the localhost. Just for privacy I didn't put here.*
okay....
Here is the output of radiusd -X command:
and there. bingo.
libdir = "/usr/local/lib/freeradius-2.1.10"
urgh. why? really...why? when you did the ./configure stage did you ask for it to go into this special non-standard directory? if its there....then you need to ensure that your system knows its there too - and a default server wont. you will need to edit the configuration file for your dynamic linker - usually /etc/ld.so.conf ..and then re-run /sbin/ldconfig ..you need to ensure your linker shows that it knows this.... /sbin/ldconfig -v if you need to check and double-check. if you dont see the freeradius libraries there at all then you need to check again. finally...if you dont see the rlm_ldap.so then go back one more step...and check that the LDAP module was actually built int he first place! ./configure --with-whatever-options | grep WARN you need to ensure you have LDAP support installed - the ldap development libraries usually something like openldap-devel in your package manager the fact that all the other bits work suggests that the other .so files are found..which points to the lack of ldap development libraries as the main culprit
/usr/local/etc/raddb/modules/ldap[29]: Failed to link to module 'rlm_ldap': file not found /usr/local/etc/raddb/sites-enabled/inner-tunnel[237]: Failed to load module "ldap". /usr/local/etc/raddb/sites-enabled/inner-tunnel[237]: Failed to parse "ldap" entry.
yep. the .so dynamic library file cannot be loaded alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html If you reply to this email, your message will be added to the discussion below:http://freeradius.1045715.n5.nabble.com/ldap-freeradius-tp2781398p4979784.ht... To unsubscribe from ldap+freeradius, click here. See how NAML generates this email -- View this message in context: http://freeradius.1045715.n5.nabble.com/ldap-freeradius-tp2781398p4984367.ht... Sent from the FreeRadius - User mailing list archive at Nabble.com.