freeRADIUS -> AD Auth (<100kb)
Hi there! I have a problem with the auth against an Active Directory. I would be very thankfull if you could help me. Im tring to setup an WiFi Network where the Useres can auth with their AD Useraccs, Setup: WiFi-Router with DD-WRT Ubuntu 10.04LTS with FreeRADIUS kerberus samba etc. AD at a Windows Server 2008 SBS (Total mess never install it!) The communicatuion W-Lan Client->Router->FreeRADIUS runs. The Ubuntu Server is in the Domain, wbinfo -u gives me all Users. The auth via NTLM_AUTH runns too: /etc/freeradius$ ntlm_auth --request-nt-key --domain=DOMAINNAME --username=USERNAME Password: NT_STATUS_OK: Success (0x0) I think just FreeRADIUS is configured wrong. The auth fails, respectively does not take place. I put the config files and the freeradius -X output in the attachment. (I removed a few unimportant configfiles to not hit the 100kb limit of this mailinglist.) Many thanks in advance! -- Mit freundlichem Gruß Nicolas Fischer email: nfischer@hush.com jabber: jagger@jabber.ccc.de tel: 01573-0420888 Skype: jagger64 TOX: Just ask me :) PGP-Key: http://keyserver.ubuntu.com/pks/lookup?op=vindex&fingerprint=on&search=0xCF5... If you sent me a PGP Crypted Mail I´ll be happy and will give you a free cookie :)
Here’s your problem: ntlm_auth = "/etc/freeradius/modules/ntlm_auth --request-nt-key --domain=OBLAN --username==%{%{User-Name}:-None}}" You have to set ntlm_auth to the path of the ntlm_auth binary… not the FreeRADIUS module. It usually lives in /usr/bin. ‘which ntlm_auth’ usually tells you where. Stefan From: freeradius-users-bounces+stefan.paetow=ja.net@lists.freeradius.org [mailto:freeradius-users-bounces+stefan.paetow=ja.net@lists.freeradius.org] On Behalf Of nfischer@hush.com Sent: 13 August 2014 09:59 To: freeradius-users@lists.freeradius.org Subject: freeRADIUS -> AD Auth (<100kb) Hi there! I have a problem with the auth against an Active Directory. I would be very thankfull if you could help me. Im tring to setup an WiFi Network where the Useres can auth with their AD Useraccs, Setup: WiFi-Router with DD-WRT Ubuntu 10.04LTS with FreeRADIUS kerberus samba etc. AD at a Windows Server 2008 SBS (Total mess never install it!) The communicatuion W-Lan Client->Router->FreeRADIUS runs. The Ubuntu Server is in the Domain, wbinfo -u gives me all Users. The auth via NTLM_AUTH runns too: /etc/freeradius$ ntlm_auth --request-nt-key --domain=DOMAINNAME --username=USERNAME Password: NT_STATUS_OK: Success (0x0) I think just FreeRADIUS is configured wrong. The auth fails, respectively does not take place. I put the config files and the freeradius -X output in the attachment. (I removed a few unimportant configfiles to not hit the 100kb limit of this mailinglist.) Many thanks in advance! -- Mit freundlichem Gruß Nicolas Fischer email: nfischer@hush.com<mailto:nfischer@hush.com> jabber: jagger@jabber.ccc.de<mailto:jagger@jabber.ccc.de> tel: 01573-0420888 Skype: jagger64 TOX: Just ask me :) PGP-Key: http://keyserver.ubuntu.com/pks/lookup?op=vindex&fingerprint=on&search=0xCF5... If you sent me a PGP Crypted Mail I´ll be happy and will give you a free cookie :) Janet(UK) is a trading name of Jisc Collections and Janet Limited, a not-for-profit company which is registered in England under No. 2881024 and whose Registered Office is at Lumen House, Library Avenue, Harwell Oxford, Didcot, Oxfordshire. OX11 0SG. VAT No. 614944238
Hi,
The communicatuion W-Lan Client->Router->FreeRADIUS runs. The Ubuntu Server is in the Domain, wbinfo -u gives me all Users. The auth via NTLM_AUTH runns too: /etc/freeradius$ ntlm_auth --request-nt-key --domain=DOMAINNAME --username=USERNAME Password: NT_STATUS_OK: Success (0x0)
I think just FreeRADIUS is configured wrong. The auth fails, respectively does not take place.
I put the config files and the freeradius -X output in the attachment. (I removed a few unimportant configfiles to not hit the 100kb limit of this mailinglist.)
dont need/want your config. just post the text of the freeradius -X debug output this is a basic scenario and is documented at http://wiki.freeradius.org/guide/FreeRADIUS-Active-Directory-Integration-HOW... (dont need to ever look at other resources for this) alan
participants (3)
-
A.L.M.Buxey＠lboro.ac.uk -
nfischer＠hush.com -
Stefan Paetow