setting freeradius2 to AD authentication
Hello, configuring freeradius2 to authenticate using AD as described by Enrik http://archives.free.net.ph/message/20060104.153134.68c5be76.en.html should it work with PEAP also ? or it works only eith EAP-TTLS ? The method is different from the one reported in the freeradius wiki http://wiki.freeradius.org/FreeRADIUS_Active_Directory_Integration_HOWTO which uses ntlmauth instead and works with PEAP too. thanks Rick
Riccardo Veraldi wrote:
configuring freeradius2 to authenticate using AD as described by Enrik
http://archives.free.net.ph/message/20060104.153134.68c5be76.en.html
From 2006. Why?.
should it work with PEAP also ? or it works only eith EAP-TTLS ?
No ide.
The method is different from the one reported in the freeradius wiki
http://wiki.freeradius.org/FreeRADIUS_Active_Directory_Integration_HOWTO
which uses ntlmauth instead and works with PEAP too.
So... which one are you going to follow? Documentation from the *official* FreeRADIUS web site, which was updated recently, *and* which points to new documentation. Or... 4-year old documentation from a third-party site that has nothing to do with FreeRADIUS. Which one do you think we should recommend? Alan DeKok.
The second one... of course... but the first one sounds like more unix like... and does not need Samba. I solved the problem of LDAP + krb5 on freeradius2 with freeradius v1 it was enough to addprinc into krb5 KDC like host/radius.mydomain.org with freeradius2 it is needed also radius/radius.mydomain.org I found it in the documentation examples... Actually I am searching a way to use PEAP insted of EAP-TTLS for Eduroam inside my institution... ans for this I Cannot use Kerberos, so that I was testing with an AD Server. thanks for all the suggestions. Rick Alan DeKok wrote:
Riccardo Veraldi wrote:
configuring freeradius2 to authenticate using AD as described by Enrik
http://archives.free.net.ph/message/20060104.153134.68c5be76.en.html
From 2006. Why?.
should it work with PEAP also ? or it works only eith EAP-TTLS ?
No ide.
The method is different from the one reported in the freeradius wiki
http://wiki.freeradius.org/FreeRADIUS_Active_Directory_Integration_HOWTO
which uses ntlmauth instead and works with PEAP too.
So... which one are you going to follow? Documentation from the *official* FreeRADIUS web site, which was updated recently, *and* which points to new documentation.
Or... 4-year old documentation from a third-party site that has nothing to do with FreeRADIUS.
Which one do you think we should recommend?
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alan DeKok -
Riccardo Veraldi