RE: Translate between auth requests between Radius Servers.
I've Devices that use PAP. I'd like to translate to mschap and auth against Active Directory. I've looked at using LDAP but I'm unable encrypt the ldap queries / responses. -----Original Message----- From: freeradius-users-bounces+adam.staub=rascompanies.com@lists.freeradius.or g [mailto:freeradius-users-bounces+adam.staub=rascompanies.com@lists.freer adius.org] On Behalf Of Alan DeKok Sent: Tuesday, August 01, 2006 3:44 PM To: FreeRadius users mailing list Subject: Re: Translate between auth requests between Radius Servers. Adam.Staub@rascompanies.com wrote:
I've setup a FR server that I've proxied to an IAS server. If a request hits my FR server with an Auth-type PAP can I translate the auth-request to ms-chapv2 and forward to my IAS server for authentication? If so how do I accomplish that?
I have no idea why this would be necessary. There is no way to do this in the server. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ------------------------------------------------------------------------------ Note: This E-mail and any attachments may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of this E-mail and any attachments is strictly prohibited. If you have received this E-mail in error, please notify us immediately by returning it to the sender and deleting it from your computer system. Thank you for your cooperation. ==============================================================================
Adam.Staub@rascompanies.com wrote:
I've Devices that use PAP. I'd like to translate to mschap and auth against Active Directory. I've looked at using LDAP but I'm unable encrypt the ldap queries / responses.
Use ldaps, and it will be encrypted. See the "ldap" configuration section in radiusd.conf. Then use ldap bind for PAP, and it will work. Converting the request to MS-CHAP is something that no one else does, because it's not necessary. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
participants (2)
-
Adam.Staub@rascompanies.com -
Alan DeKok