Still having problems with Active Directory FreeRADIUS integration
We're still having problems getting FreeRADIUS and AD to integrate in our test lab. We followed the link Ivan sent, http://deployingradius.com/documents/configuration/active_directory.html. I've attached a file that has the output of the radiusd-X and the contents of the configuration files. Thanks, Mike Davies ________________________________ This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain information that is confidential and protected by law from unauthorized disclosure. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.
We're still having problems getting FreeRADIUS and AD to integrate in our test lab.
We followed the link Ivan sent, http://deployingradius.com/documents/configuration/active_directory.html.
I've attached a file that has the output of the radiusd-X and the contents of the configuration files.
Hm, mschap file you posted is not the one used by the server: Module: Linked to module rlm_mschap Module: Instantiating mschap mschap { use_mppe = yes require_encryption = no require_strong = no with_ntdomain_hack = no } Check what is file you altered called. You have something called mschap.org in there: including configuration file /etc/raddb/modules/mschap.org Ivan Kalik Kalik Informatika ISP
Hi,
Check what is file you altered called. You have something called mschap.org in there:
including configuration file /etc/raddb/modules/mschap.org
i'd suggst that that was the 'original' file - without realising that al files in that directory get read. if you want to keep original copies, make another directory in the top level, eg modules-available and copy the original files into there. actually...as the virtual sites use sites-available and sites-enabled, perhaps its time for modules to do the same modules-available and modules-enabled ? alan
A.L.M.Buxey@lboro.ac.uk wrote:
actually...as the virtual sites use sites-available and sites-enabled, perhaps its time for modules to do the same modules-available and modules-enabled ?
Sure. Send a patch. :) Or, use github, fork the repository, do the patches, and send an email saying where the changes are located. Alan DeKok.
Hi,
Sure. Send a patch. :)
;-) hmm, am i being too naive radiusd.conf $INCLUDE ${confdir}/modules/ becomes $INCLUDE ${confdir}/modules-enabled/ and the contents of modules/ goes into that new directory with another modules-available being created. (and then the install code updated to handle this...) i cant call what modules should not be enabled by default...maybe some community feedback? (there are some default config issues... eg we want EAP to work out of the box) alan
A.L.M.Buxey@lboro.ac.uk wrote:
hmm, am i being too naive
Patches go into git. English descriptions don't.
radiusd.conf
$INCLUDE ${confdir}/modules/
becomes
$INCLUDE ${confdir}/modules-enabled/
or: $ vi radiusd.conf <edit> $ git commit radiusd.conf
and the contents of modules/ goes into that new directory with another modules-available being created. (and then the install code updated to handle this...)
$ mkdir modules-available $ git mv modules/foo modules-available/foo ... $ git commit
i cant call what modules should not be enabled by default...maybe some community feedback? (there are some default config issues... eg we want EAP to work out of the box)
That has to be worked out. I don't have time to do it. The current situation works. So... if it's important to get this done, send a patch. Alan DeKok.
Hi,
Patches go into git. English descriptions don't.
now what kind of 1990's system is that? ;-) okay, seriously, i thought it worth a discussion before provision - perhaps there was some facet or issue that i hadnt thought of
So... if it's important to get this done, send a patch.
i think its nice to get this done...but not important/critical.. more polishing than fixing certainly. patches will come. alan
participants (4)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Davies, Mike -
Ivan Kalik