Freeradius, Active Directory and User's Group
Good afternoon. I have a freeradius server to authenticate a Alcatel device (Alcatel 5620 SAM). The freeradius server is passing requests for an AD that returns OK / NOK for authentication. This part is working. However, I need the freeradius check if the users are part of some groups. Is this possible? I've searched the Internet and read the documentation in freeradius.oef, but did not find anything about it. I'm using freeradius version 2.1.8. Best regards... Lincoln Zuljewic Silva More contact info.: http://www.system.adm.br/contact.php "How often must a question be asked before it’s considered a frequently asked question?"
On 03/29/2010 03:13 PM, Lincoln Zuljewic Silva wrote:
Good afternoon.
I have a freeradius server to authenticate a Alcatel device (Alcatel 5620 SAM). The freeradius server is passing requests for an AD that returns OK / NOK for authentication.
This part is working. However, I need the freeradius check if the users are part of some groups. Is this possible?
I've searched the Internet and read the documentation in freeradius.oef, but did not find anything about it.
I'm using freeradius version 2.1.8.
read doc/ldap_howto.txt -- John Dennis <jdennis@redhat.com> Looking to carve out IT costs? www.redhat.com/carveoutcosts/
I'm sorry. I forgot to mention that I'm not using LDAP, but Samba to integrate the freeradius with AD. Regards Lincoln On Mon, Mar 29, 2010 at 4:54 PM, John Dennis <jdennis@redhat.com> wrote:
On 03/29/2010 03:13 PM, Lincoln Zuljewic Silva wrote:
Good afternoon.
I have a freeradius server to authenticate a Alcatel device (Alcatel 5620 SAM). The freeradius server is passing requests for an AD that returns OK / NOK for authentication.
This part is working. However, I need the freeradius check if the users are part of some groups. Is this possible?
I've searched the Internet and read the documentation in freeradius.oef, but did not find anything about it.
I'm using freeradius version 2.1.8.
read doc/ldap_howto.txt
-- John Dennis <jdennis@redhat.com>
Looking to carve out IT costs? www.redhat.com/carveoutcosts/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Lincoln Zuljewic Silva More contact info.: http://www.system.adm.br/contact.php "How often must a question be asked before it’s considered a frequently asked question?"
On 03/29/2010 04:02 PM, Lincoln Zuljewic Silva wrote:
I'm sorry.
I forgot to mention that I'm not using LDAP, but Samba to integrate the freeradius with AD.
O.K. I presume you're using samba for authentication, but where are you storing the information about which groups a user is in? I presume it's in AD. AD is an ldap server that you can query during authorization which is when and where you would do the group check. -- John Dennis <jdennis@redhat.com> Looking to carve out IT costs? www.redhat.com/carveoutcosts/
Understood, but the freeradius will be able to return this group information to the Alcatel device? Regards Lincoln On Mon, Mar 29, 2010 at 5:10 PM, John Dennis <jdennis@redhat.com> wrote:
On 03/29/2010 04:02 PM, Lincoln Zuljewic Silva wrote:
I'm sorry.
I forgot to mention that I'm not using LDAP, but Samba to integrate the freeradius with AD.
O.K. I presume you're using samba for authentication, but where are you storing the information about which groups a user is in? I presume it's in AD. AD is an ldap server that you can query during authorization which is when and where you would do the group check. -- John Dennis <jdennis@redhat.com>
Looking to carve out IT costs? www.redhat.com/carveoutcosts/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Lincoln Zuljewic Silva More contact info.: http://www.system.adm.br/contact.php "How often must a question be asked before it’s considered a frequently asked question?"
participants (2)
-
John Dennis -
Lincoln Zuljewic Silva