RV: winbindd_priv dont exist
interesting, you known some guide for do it? its posible do it on a domain controller with samba? ________________________________ De: Freeradius-Users <freeradius-users-bounces+cgermanb=live.com.ar@lists.freeradius.org> en nombre de Alan Buxey <alan.buxey@gmail.com> Enviado: lunes, 11 de diciembre de 2017 04:11 p.m. Para: FreeRadius users mailing list Asunto: Re: winbindd_priv dont exist You can add the user your server runs as to the wbpriv group. Otherwise change the winbind_privileged folder to be readable by the user/group that freeradius runs as (which will get reset each time you patch samba). Anyway, run latest 3.0.x release and use winbind natively instead! 2017 is the year when ntlm_auth for freeradius becomes history! :) alan On 11 Dec 2017 5:35 pm, "Carlos Bordon" <cgermanb@live.com.ar> wrote:
hi people, i doing my server number 50 with freeradius, always fails.
in this case, i have configurate ntlm but when configure mschap i have error:
Exec output: Reading winbind reply failed! (0xc0000001) Exec plaintext: Reading winbind reply failed! (0xc0000001)
searching a solution, search the group but dont exist, i have the group freerad.
i make chown to the folder winbindd_privileged and add the group freerad but nothing happend.
what can i do?
Regards - List info/subscribe/unsubscribe? See http://www.freeradius.org/
list/users.html
FreeRADIUS<http://www.freeradius.org/> www.freeradius.org The world's leading RADIUS server. The project includes a GPL AAA server, BSD licensed client and PAM and Apache modules. Full support is available from NetworkRADIUS. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Support & Services<http://www.freeradius.org/list/users.html> www.freeradius.org The world's leading RADIUS server. The project includes a GPL AAA server, BSD licensed client and PAM and Apache modules. Full support is available from NetworkRADIUS.
I see this : https://wiki.freeradius.org/guide/Active-Directory-direct-via-winbind Authenticating against Active Directory using winbind<https://wiki.freeradius.org/guide/Active-Directory-direct-via-winbind> wiki.freeradius.org Many sites have Active Directory installed as their central user directory. As such, wanting to authenticate against it from FreeRADIUS is a common requirement. but, support 802.1x? i want take groups for AD to assign vlans, it is possible with winbind? thanks for the help ________________________________ De: Freeradius-Users <freeradius-users-bounces+cgermanb=live.com.ar@lists.freeradius.org> en nombre de Carlos Bordon <cgermanb@live.com.ar> Enviado: lunes, 11 de diciembre de 2017 04:32 p.m. Para: freeradius-users@lists.freeradius.org Asunto: RV: winbindd_priv dont exist interesting, you known some guide for do it? its posible do it on a domain controller with samba? ________________________________ De: Freeradius-Users <freeradius-users-bounces+cgermanb=live.com.ar@lists.freeradius.org> en nombre de Alan Buxey <alan.buxey@gmail.com> Enviado: lunes, 11 de diciembre de 2017 04:11 p.m. Para: FreeRadius users mailing list Asunto: Re: winbindd_priv dont exist You can add the user your server runs as to the wbpriv group. Otherwise change the winbind_privileged folder to be readable by the user/group that freeradius runs as (which will get reset each time you patch samba). Anyway, run latest 3.0.x release and use winbind natively instead! 2017 is the year when ntlm_auth for freeradius becomes history! :) alan On 11 Dec 2017 5:35 pm, "Carlos Bordon" <cgermanb@live.com.ar> wrote:
hi people, i doing my server number 50 with freeradius, always fails.
in this case, i have configurate ntlm but when configure mschap i have error:
Exec output: Reading winbind reply failed! (0xc0000001) Exec plaintext: Reading winbind reply failed! (0xc0000001)
searching a solution, search the group but dont exist, i have the group freerad.
i make chown to the folder winbindd_privileged and add the group freerad but nothing happend.
what can i do?
Regards - List info/subscribe/unsubscribe? See http://www.freeradius.org/
list/users.html
FreeRADIUS<http://www.freeradius.org/> www.freeradius.org The world's leading RADIUS server. The project includes a GPL AAA server, BSD licensed client and PAM and Apache modules. Full support is available from NetworkRADIUS. FreeRADIUS<http://www.freeradius.org/> FreeRADIUS<http://www.freeradius.org/> www.freeradius.org The world's leading RADIUS server. The project includes a GPL AAA server, BSD licensed client and PAM and Apache modules. Full support is available from NetworkRADIUS. www.freeradius.org<http://www.freeradius.org> FreeRADIUS<http://www.freeradius.org/> www.freeradius.org The world's leading RADIUS server. The project includes a GPL AAA server, BSD licensed client and PAM and Apache modules. Full support is available from NetworkRADIUS. The world's leading RADIUS server. The project includes a GPL AAA server, BSD licensed client and PAM and Apache modules. Full support is available from NetworkRADIUS. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Support & Services<http://www.freeradius.org/list/users.html> www.freeradius.org The world's leading RADIUS server. The project includes a GPL AAA server, BSD licensed client and PAM and Apache modules. Full support is available from NetworkRADIUS. Support & Services<http://www.freeradius.org/list/users.html> Support & Services<http://www.freeradius.org/list/users.html> www.freeradius.org The world's leading RADIUS server. The project includes a GPL AAA server, BSD licensed client and PAM and Apache modules. Full support is available from NetworkRADIUS. www.freeradius.org<http://www.freeradius.org> FreeRADIUS<http://www.freeradius.org/> www.freeradius.org The world's leading RADIUS server. The project includes a GPL AAA server, BSD licensed client and PAM and Apache modules. Full support is available from NetworkRADIUS. The world's leading RADIUS server. The project includes a GPL AAA server, BSD licensed client and PAM and Apache modules. Full support is available from NetworkRADIUS. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Support & Services<http://www.freeradius.org/list/users.html> www.freeradius.org The world's leading RADIUS server. The project includes a GPL AAA server, BSD licensed client and PAM and Apache modules. Full support is available from NetworkRADIUS.
Hi! i start from the begin again but with ldap, i am stuck with this error: [ldap] ldap_get_conn: Checking Id: 0 [ldap] ldap_get_conn: Got Id: 0 [ldap] attempting LDAP reconnection [ldap] closing existing LDAP connection [ldap] (re)connect to 172.18.98.110:389, authentication 0 [ldap] bind as / to 172.18.98.110:389 [ldap] waiting for bind result ... [ldap] Bind was successful [ldap] performing search in dc=***,dc=***, with filter (uid=charly) WARNING: Please set 'chase_referrals=yes' and 'rebind=yes' WARNING: See the ldap module configuration for details [ldap] ldap_search() failed: Operations error i search in google but nothing works. Regards ________________________________ De: Freeradius-Users <freeradius-users-bounces+cgermanb=live.com.ar@lists.freeradius.org> en nombre de Matthew Newton <mcn@freeradius.org> Enviado: lunes, 11 de diciembre de 2017 04:59 p.m. Para: freeradius-users@lists.freeradius.org Asunto: Re: winbindd_priv dont exist On Mon, 2017-12-11 at 19:37 +0000, Carlos Bordon wrote:
but, support 802.1x? i want take groups for AD to assign vlans, it is possible with winbind?
Use the LDAP module, it's the best way with AD. -- Matthew - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Support & Services<http://www.freeradius.org/list/users.html> www.freeradius.org The world's leading RADIUS server. The project includes a GPL AAA server, BSD licensed client and PAM and Apache modules. Full support is available from NetworkRADIUS.
On Dec 12, 2017, at 11:58 AM, Carlos Bordon <cgermanb@live.com.ar> wrote:
i start from the begin again but with ldap, i am stuck with this error:
[ldap] ldap_get_conn: Checking Id: 0 [ldap] ldap_get_conn: Got Id: 0 [ldap] attempting LDAP reconnection [ldap] closing existing LDAP connection [ldap] (re)connect to 172.18.98.110:389, authentication 0 [ldap] bind as / to 172.18.98.110:389 [ldap] waiting for bind result ... [ldap] Bind was successful [ldap] performing search in dc=***,dc=***, with filter (uid=charly) WARNING: Please set 'chase_referrals=yes' and 'rebind=yes' WARNING: See the ldap module configuration for details [ldap] ldap_search() failed: Operations error
What part of that message is unclear?
i search in google but nothing works.
Follow the instructions you posted to the list. Edit raddb/mods-enabled/ldap. Look for "chase_referrals". and "rebind". Alan DeKok.
Hi Alan, They are uncomment this options but nothing happend , try restarting too regards ________________________________ De: Freeradius-Users <freeradius-users-bounces+cgermanb=live.com.ar@lists.freeradius.org> en nombre de Alan DeKok <aland@deployingradius.com> Enviado: martes, 12 de diciembre de 2017 02:00 p.m. Para: FreeRadius users mailing list Asunto: Re: winbindd_priv dont exist On Dec 12, 2017, at 11:58 AM, Carlos Bordon <cgermanb@live.com.ar> wrote:
i start from the begin again but with ldap, i am stuck with this error:
[ldap] ldap_get_conn: Checking Id: 0 [ldap] ldap_get_conn: Got Id: 0 [ldap] attempting LDAP reconnection [ldap] closing existing LDAP connection [ldap] (re)connect to 172.18.98.110:389, authentication 0 [ldap] bind as / to 172.18.98.110:389 [ldap] waiting for bind result ... [ldap] Bind was successful [ldap] performing search in dc=***,dc=***, with filter (uid=charly) WARNING: Please set 'chase_referrals=yes' and 'rebind=yes' WARNING: See the ldap module configuration for details [ldap] ldap_search() failed: Operations error
What part of that message is unclear?
i search in google but nothing works.
Follow the instructions you posted to the list. Edit raddb/mods-enabled/ldap. Look for "chase_referrals". and "rebind". Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Support & Services<http://www.freeradius.org/list/users.html> www.freeradius.org The world's leading RADIUS server. The project includes a GPL AAA server, BSD licensed client and PAM and Apache modules. Full support is available from NetworkRADIUS.
On Dec 12, 2017, at 12:27 PM, Carlos Bordon <cgermanb@live.com.ar> wrote:
They are uncomment this options but nothing happend , try restarting too
You need to restart the server after that configuration change. If you still see the same error, then you're editing one file, and the server is reading another one. Read the debug output to see which file is used for the LDAP module. Then, edit that file. Alan DeKok.
participants (3)
-
Alan DeKok -
Carlos Bordon -
Matthew Newton