Alvin Ramos wrote:
Is it possible to have 802.1x EAP and Adtran to authenticate to freeradius?
You're mixing terminology. EAP is an authentication protocol. Adtrans is a vendor. So... what *authentication method* is being used by Adtran? If you run the server in debugging mode, you'll see.
I’ve got the 802.1x EAP authenticating to Active Directory, but, when I add in the users file:
Default LDAP-Group!="NetworkAdmins", Auth-Type := NTLM
I can login to the adtran device, but not to the 802.1x EAP.
*Why* did you add that to the "users" file? In the absence of *reasons*, it looks like you're making random changes, and hoping it will magically work. It won't. Run the server in debugging mode, and read the output. Look at the output in one situation, and compare it to the other. You will be able to see that the packets are different. Then, write policies which check for those differences, and implement rule 1 for situation 1, and rule 2 for situation 2. Don't use the "users" file. It's not generic enough. Just put the rules directly into raddb/sites-enabled/default, in the "authorize" section. See "man unlang" for syntax, etc. I can't give you more specific help, because your message is pretty much content free. If you want more details in an answer, post more details in your questions.
Should I provide more information?
The FAQ, "man" page, web pages, and messages every day on this list say to post the debug output. Please do so. Alan DeKok.