Centralized authentication
Hello everybody, I would like to know if anybody had worked on centralizing authentication on FreeRadius and OpenLDAP for the following technologies: - Nokia IPSO - 3com switches - Cisco Pix I'm looking for any guides, howtos... Thanks
Howto: put username and cleartext password in users file. Done. Works with every device and every authentication protocol (that uses passwords, not certificates etc.). Ivan Kalik Kalik Informatika ISP Dana 13/1/2009, "scouf scouf" <scouffa7@yahoo.fr> piše:
Hello everybody, I would like to know if anybody had worked on centralizing authentication on FreeRadius and OpenLDAP for the following technologies: - Nokia IPSO - 3com switches - Cisco Pix
I'm looking for any guides, howtos...
Thanks
Thanks for your response. But since I'm not familiar with these technologies, I would've liked if anybody has a howto to set up the configuration.. And since I'm using an OpenLDAP server a base for users account, I was wondering should be stored users' password in the LDAP server if clients are using PAP/CHAP-like mechanisms. And how could I reset passwords on these technologies, whereas the password is stored in the LDAP server. Thanks. ________________________________ De : "tnt@kalik.net" <tnt@kalik.net> À : FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Envoyé le : Mardi, 13 Janvier 2009, 12h31mn 47s Objet : Re: Centralized authentication Howto: put username and cleartext password in users file. Done. Works with every device and every authentication protocol (that uses passwords, not certificates etc.). Ivan Kalik Kalik Informatika ISP Dana 13/1/2009, "scouf scouf" <scouffa7@yahoo.fr> piše:
Hello everybody, I would like to know if anybody had worked on centralizing authentication on FreeRadius and OpenLDAP for the following technologies: - Nokia IPSO - 3com switches - Cisco Pix
I'm looking for any guides, howtos...
Thanks
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
http://letmegooglethatforyou.com/?q=freeradius+ldap http://letmegooglethatforyou.com/?q=freeradius+openldap On Tue, Jan 13, 2009 at 6:18 AM, scouf scouf <scouffa7@yahoo.fr> wrote:
Thanks for your response.
But since I'm not familiar with these technologies, I would've liked if anybody has a howto to set up the configuration..
And since I'm using an OpenLDAP server a base for users account, I was wondering should be stored users' password in the LDAP server if clients are using PAP/CHAP-like mechanisms. And how could I reset passwords on these technologies, whereas the password is stored in the LDAP server.
Thanks.
________________________________ De : "tnt@kalik.net" <tnt@kalik.net> À : FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Envoyé le : Mardi, 13 Janvier 2009, 12h31mn 47s Objet : Re: Centralized authentication
Howto:
put username and cleartext password in users file.
Done. Works with every device and every authentication protocol (that uses passwords, not certificates etc.).
Ivan Kalik Kalik Informatika ISP
Dana 13/1/2009, "scouf scouf" <scouffa7@yahoo.fr> piše:
Hello everybody, I would like to know if anybody had worked on centralizing authentication on FreeRadius and OpenLDAP for the following technologies: - Nokia IPSO - 3com switches - Cisco Pix
I'm looking for any guides, howtos...
Thanks
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Random quote of the week/month/whenever i get to updating it: "Opportunity knocked. My doorman threw him out." - Adrienne Gusoff "At school you don't get parole, good behavior only brings a longer sentence." - The History Boys
scouf scouf wrote:
Thanks for your response.
But since I'm not familiar with these technologies, I would've liked if anybody has a howto to set up the configuration..
And since I'm using an OpenLDAP server a base for users account, I was wondering should be stored users' password in the LDAP server if clients are using PAP/CHAP-like mechanisms. And how could I reset passwords on these technologies, whereas the password is stored in the LDAP server.
scouf scouf, basically install freeradius and read through every file in /etc/freeradius ........ Alan, I've been monitoring the list for a while, and a lot of people don't understand that the configuration files is VERY well documented.... Basically the configuration files is also a log of the documentation. (I new NOTHING about radius before I started. I simply read though ALL the files in /etc/freeradius, and it helped a LOT). Might be worth it to mention that in the documentation section on the download page.... -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782
But since I'm not familiar with these technologies, I would've liked if anybody has a howto to set up the configuration...
Do you have any reason to believe that default configuration will not work? Server comes already configured to work with most protocols.
And since I'm using an OpenLDAP server a base for users account, I was wondering should be stored users' password in the LDAP server if clients are using PAP/CHAP-like mechanisms. And how could I reset passwords on these technologies, whereas the password is stored in the LDAP server.
I am sure there is OpenLDAP documentation about user management. This has nothing to do with freeradius. Only thing you need to know is that CHAP requires cleartext passwords - encrypted can't work. http://deployingradius.com/documents/protocols/compatibility.html Instructions for configuring ldap module are - in the ldap module configuration file (raddb/modules/ldap). Additional information can be found in man and doc pages included with the server or on the freeradius wiki. Ivan Kalik Kalik Informatika ISP
participants (4)
-
Johan Meiring -
Paul Bartell -
scouf scouf -
tnt@kalik.net