The second one... of course... but the first one sounds like more unix like... and does not need Samba. I solved the problem of LDAP + krb5 on freeradius2 with freeradius v1 it was enough to addprinc into krb5 KDC like host/radius.mydomain.org with freeradius2 it is needed also radius/radius.mydomain.org I found it in the documentation examples... Actually I am searching a way to use PEAP insted of EAP-TTLS for Eduroam inside my institution... ans for this I Cannot use Kerberos, so that I was testing with an AD Server. thanks for all the suggestions. Rick Alan DeKok wrote:
Riccardo Veraldi wrote:
configuring freeradius2 to authenticate using AD as described by Enrik
http://archives.free.net.ph/message/20060104.153134.68c5be76.en.html
From 2006. Why?.
should it work with PEAP also ? or it works only eith EAP-TTLS ?
No ide.
The method is different from the one reported in the freeradius wiki
http://wiki.freeradius.org/FreeRADIUS_Active_Directory_Integration_HOWTO
which uses ntlmauth instead and works with PEAP too.
So... which one are you going to follow? Documentation from the *official* FreeRADIUS web site, which was updated recently, *and* which points to new documentation.
Or... 4-year old documentation from a third-party site that has nothing to do with FreeRADIUS.
Which one do you think we should recommend?
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html