On Wed, 2018-08-15 at 17:28 +0000, Kevin Virk wrote:
I came across this thread in my search for answers http://freeradius.1045715.n5.nabble.com/FreeRadius-3-0-11-and- Winbind-td5743424.html and it is stating that winbind is not the preferred method for dynamic vlan assignment. This thread is about two years old so I was hoping if anyone could answer if this was still the case.
It's still the same.
I am using FreeRADIUS Version 2.2.8. As this was what was downloaded using the deb package on Ubuntu 16.04.
2.2.8 is obsolete. You should upgrade to 3.0.17. Or at least 2.2.10 (which is still obsolete).
The setup I am hoping to achieve is EAP-TLS 802.1x that can dynamically assign vlans to users based off active directory information and has the ability to revoke certs and check active directory for disabled accounts and not allow them to auth. Is this possible?
Yes. As you want EAP-TLS you don't need winbind. Still use LDAP to get data about the user from AD. -- Matthew