Need help on Free Radius.
Hello All, I have an Active Directory on window 2k3 and I want to use the free radius on Linux machine for authenticating users domain. I tried to configure free radius with ntlm_auth for working auth but it not work. Although on free radius i can auth successful for domain user by command: ntlm_auth --domain=ABC --username=test ---> result: auth sucess (...), but on the auth client when i checked with the wrong name/pass it still showed message "auth sucess" after that this user/pass cannot login to device on domain. Can anybody help me on this and share me how to configure freeradius for authenticating domain uses? Thanks
no name wrote:
I have an Active Directory on window 2k3 and I want to use the free radius on Linux machine for authenticating users domain. I tried to configure free radius with ntlm_auth for working auth but it not work. Although on free radius i can auth successful for domain user by command: ntlm_auth --domain=ABC --username=test ---> result: auth sucess (...), but on the auth client when i checked with the wrong name/pass it still showed message "auth sucess" after that this user/pass cannot login to device on domain. Can anybody help me on this and share me how to configure freeradius for authenticating domain uses?
Follow the instructions on my web site: http://deployingradius.com/documents/configuration/active_directory.html And read the FAQ for "it doesn't work". Alan DeKok.
Hi Alan, Although, i worked as the configuration on your website but free radius still not work. Beside it, i also edited the users file in /etc/raddb with auth-type is ntlm_auth. Then I run radius with debugging mode and it showed: auth type is system and authentication process failed. Could you please tell me how to configure the users file in /etc/raddb? Thanks. --- On Mon, 8/11/08, Alan DeKok <aland@deployingradius.com> wrote: From: Alan DeKok <aland@deployingradius.com> Subject: Re: Need help on Free Radius. To: noname10802008@yahoo.com, "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Date: Monday, August 11, 2008, 1:48 AM no name wrote:
I have an Active Directory on window 2k3 and I want to use the free radius on Linux machine for authenticating users domain. I tried to configure free radius with ntlm_auth for working auth but it not work. Although on free radius i can auth successful for domain user by command: ntlm_auth --domain=ABC --username=test ---> result: auth sucess (...), but on the auth client when i checked with the wrong name/pass it still showed message "auth sucess" after that this user/pass cannot login to device on domain. Can anybody help me on this and share me how to configure freeradius for authenticating domain uses?
Follow the instructions on my web site: http://deployingradius.com/documents/configuration/active_directory.html And read the FAQ for "it doesn't work". Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Le Sang wrote:
Although, i worked as the configuration on your website but free radius still not work. Beside it, i also edited the users file in /etc/raddb with auth-type is ntlm_auth. Then I run radius with debugging mode and it showed: auth type is system and authentication process failed.
If it's doing that, it's because you are NOT following the instructions. Go back and read the instructions for editing the "users" file. Alan DeKok.
Hi Alan, I did like you wrote on your website but this problem still happened. And I did not see how you work with users file. (because i found building free radius by 4 files: eap, radiusd.conf, users, clients) Would you like tell me how to configure the users file and anything if i missed in the configuration? Thanks. --- On Mon, 8/11/08, Alan DeKok <aland@deployingradius.com> wrote: From: Alan DeKok <aland@deployingradius.com> Subject: Re: Need help on Free Radius. To: noname10802008@yahoo.com, "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Date: Monday, August 11, 2008, 1:48 AM no name wrote:
I have an Active Directory on window 2k3 and I want to use the free radius on Linux machine for authenticating users domain. I tried to configure free radius with ntlm_auth for working auth but it not work. Although on free radius i can auth successful for domain user by command: ntlm_auth --domain=ABC --username=test ---> result: auth sucess (...), but on the auth client when i checked with the wrong name/pass it still showed message "auth sucess" after that this user/pass cannot login to device on domain. Can anybody help me on this and share me how to configure freeradius for authenticating domain uses?
Follow the instructions on my web site: http://deployingradius.com/documents/configuration/active_directory.html And read the FAQ for "it doesn't work". Alan DeKok.
no name wrote:
I did like you wrote on your website but this problem still happened.
The problem occurs only if you don't follow the instructions.
And I did not see how you work with users file. (because i found building free radius by 4 files: eap, radiusd.conf, users, clients) Would you like tell me how to configure the users file and anything if i missed in the configuration?
The instructions say to put the test entry that forces Auth-Type := ntlm_auth at the TOP of the "users" file. The only way to get the messages you saw is: a) You didn't edit the "users" file. b) You put the entry at the BOTTOM of the "users" file. Alan DeKok.
Hi Alan, Yes. I edited the users files and checked on local auth was successfully. But now I want to use the free radius for authenticating user on domain controller (AD on window server 2003) and it did not work. Could you please tell me how to configure free radius authentication for domain users. Thanks. --- On Mon, 8/11/08, Alan DeKok <aland@deployingradius.com> wrote: From: Alan DeKok <aland@deployingradius.com> Subject: Re: Need help on Free Radius. To: noname10802008@yahoo.com, "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Date: Monday, August 11, 2008, 3:47 AM no name wrote:
I did like you wrote on your website but this problem still happened.
The problem occurs only if you don't follow the instructions.
And I did not see how you work with users file. (because i found building free radius by 4 files: eap, radiusd.conf, users, clients) Would you like tell me how to configure the users file and anything if i missed in the configuration?
The instructions say to put the test entry that forces Auth-Type := ntlm_auth at the TOP of the "users" file. The only way to get the messages you saw is: a) You didn't edit the "users" file. b) You put the entry at the BOTTOM of the "users" file. Alan DeKok.
no name wrote:
Yes. I edited the users files and checked on local auth was successfully. But now I want to use the free radius for authenticating user on domain controller (AD on window server 2003) and it did not work.
See the FAQ for "it doesn't work".
Could you please tell me how to configure free radius authentication for domain users.
My web page explains how. The FAQ explains how to ask questions on this list. Saying repeatedly "it doesn't work" is useless. It wastes your time, and ours. Alan DeKok.
participants (3)
-
Alan DeKok -
Le Sang -
no name