Hi, Is it possible to login in into samba share by using freeradius and get propper group assignment? I try switch as much authorize mechanizm as I could to freeradius. Tried to find native mechanizm in samba documentation but no info there :( -- Jarosław Kłopotek, kom. 607 893 111 INTERDUO Bujek Kłopotek Sowa sp.j. ul. Krańcowa 17, 21-100 Lubartów tel. 81 475 3000
On Aug 2, 2023, at 2:50 AM, Jarosław Kłopotek <jkl@interduo.pl> wrote:
Is it possible to login in into samba share by using freeradius and get propper group assignment?
No. RADIUS is an authentication protocol which does little more than username / password checking. SMB is an enormous suite of hundreds of protocols which do all kinds of things. So no, you can't replace one software product with an entirely unrelated software product. They're completely different. Alan DeKok.
W dniu 2.08.2023 o 14:34, Alan DeKok pisze:
On Aug 2, 2023, at 2:50 AM, Jarosław Kłopotek <jkl@interduo.pl> wrote:
Is it possible to login in into samba share by using freeradius and get propper group assignment? No.
RADIUS is an authentication protocol which does little more than username / password checking. SMB is an enormous suite of hundreds of protocols which do all kinds of things. In the past I saw working pair ldap+samba so I thought it was also possible to just use freeradius+samba pair for everyday. ProFTPd got mod_radius module - for samba sadly there is no such thing or I just cannot find it - that is the purpose I am asking about it here. So no, you can't replace one software product with an entirely unrelated software product. They're completely different. For sure - I don't want to replace samba by freeradius but just login to samba share using creditentials from freeradius.
Thanks a lot for the answer. -- Jarosław Kłopotek, kom. 607 893 111 INTERDUO Bujek Kłopotek Sowa sp.j. ul. Krańcowa 17, 21-100 Lubartów tel. 81 475 3000
On Aug 2, 2023, at 8:53 AM, Jarosław Kłopotek <jkl@interduo.pl> wrote:
In the past I saw working pair ldap+samba so I thought it was also possible to just use freeradius+samba pair for everyday.
Does the Samba documentation say it does this? And why ask on this list how Samba works? We didn't write Samba. Outside of ntlm_auth integration, I don't use Samba. Alan DeKok.
I tried to find it without success in samba docs. I am asking here because there are more people wanting integrate auth for all avaiable services (especially most popular file sharing service samba) here than on samba mailing list. I am not asking how does samba work but is the integration ready. Thanks for key word 'ntlm_auth' - I will search this in manuals. Dnia 2 sierpnia 2023 17:48:42 CEST, Alan DeKok <aland@deployingradius.com> napisał/a:
On Aug 2, 2023, at 8:53 AM, Jarosław Kłopotek <jkl@interduo.pl> wrote:
In the past I saw working pair ldap+samba so I thought it was also possible to just use freeradius+samba pair for everyday.
Does the Samba documentation say it does this?
And why ask on this list how Samba works? We didn't write Samba. Outside of ntlm_auth integration, I don't use Samba.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Aug 2, 2023, at 12:59 PM, Jarosław Kłopotek <jkl@interduo.pl> wrote:
I tried to find it without success in samba docs.
Then it likely doesn't exist.
I am asking here because there are more people wanting integrate auth for all avaiable services (especially most popular file sharing service samba) here than on samba mailing list.
So... it's best to repeatedly ask a Samba question on this list, even though we keep saying "We don't know". There isn't much point in asking the question on the Samba list? I don't understand. Alan DeKok.
participants (2)
-
Alan DeKok -
Jarosław Kłopotek