Hi, I am new to FreeRADIUS. I would like to set up FreeRADIUS, such that the AS proxies the Kerberos authentication request from the access point to the Kerberos KDC and the access point grants access to the wired network upon successful authentication. I googled about the subject and found the following article about the module rlm_krb5 :- http://wiki.freeradius.org/Rlm_krb5 http://archives.free.net.ph/message/20060104.153134.68c5be76.en.html Is there anyone knows what the module rlm_krb5 does? Whether it is the module I need to use to do the job? Thanks a lot. John Mok
John Mok wrote:
I am new to FreeRADIUS. I would like to set up FreeRADIUS, such that the AS proxies the Kerberos authentication request from the access point
The AP sends a kerberos authentication request?
to the Kerberos KDC and the access point grants access to the wired network upon successful authentication.
If that happened, then RADIUS would not be involved. Only Kerberos.
Is there anyone knows what the module rlm_krb5 does? Whether it is the module I need to use to do the job?
The Kerberos module takes a username && password, and validates it against a Kerberos KDC. I would suggest clarifying what technology is being used before trying to come up with a solution. Alan DeKok.
Hi,
I am new to FreeRADIUS. I would like to set up FreeRADIUS, such that the AS proxies the Kerberos authentication request from the access point to the Kerberos KDC and the access point grants access to the wired network upon successful authentication.
can the AP do kerberos? if so, why the RADIUS? what you probably mean is that you will take a user/pass from a client as their login - PAP/captive portal? or EAP-TTLS/PAP ? what rlm_krb5 is take those details and use the system kerberos (eg stuff all done via /etc/krb5.conf etc) so auth against your kerberos KDC system - MS AD or whatever it is. so long as your krb5 environment is fine - eg 'kinit someuser' works, then rlm_krb5 does its job very well thanks - we've got 3 different installations doing that alan
participants (3)
-
Alan Buxey -
Alan DeKok -
John Mok