FreeRADIUS and Active Directory Integration
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point. I would like to use FreeRADIUS to authenticate VPN users and wireless, and I'm working on VPN right now. From what I understand so far, I want to use LDAP to check if the person is in the right group first, and if not reject them. If they are in the right group then authenticate using ntlm_auth. I am also understanding that the place to do this is no longer the users/authorize file and that it should be done in the 'default' file using 'unlang'. Is this correct so far? If so, can someone give me an example of the 'unlang' portion?
On Jul 22, 2015, at 11:59 AM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point. I would like to use FreeRADIUS to authenticate VPN users and wireless, and I'm working on VPN right now. From what I understand so far, I want to use LDAP to check if the person is in the right group first, and if not reject them. If they are in the right group then authenticate using ntlm_auth. I am also understanding that the place to do this is no longer the users/authorize file and that it should be done in the 'default' file using 'unlang'. Is this correct so far? If so, can someone give me an example of the 'unlang' portion?
if (LDAP-Group != 'VPNgroup) { reject } LDAP should be replaced with the instance of the LDAP module you're using. -Arran
Is this correct? [/etc/raddb/sites-available/default] ... authorize { preprocess rewrite_calling_station_id eap { ok = return updated = return } files ldap if (LDAP-Group != 'VPN-Internal') { reject } ntlm_auth } authenticate { #Auth-Type PAP { # pap #} #Auth-Type CHAP { # chap #} Auth-Type ldap { ldap } Auth-Type MS-CHAP { mschap } #digest eap } ... On Wednesday, July 22, 2015 12:11 PM, Arran Cudbard-Bell <a.cudbardb@freeradius.org> wrote:
On Jul 22, 2015, at 11:59 AM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point. I would like to use FreeRADIUS to authenticate VPN users and wireless, and I'm working on VPN right now. From what I understand so far, I want to use LDAP to check if the person is in the right group first, and if not reject them. If they are in the right group then authenticate using ntlm_auth. I am also understanding that the place to do this is no longer the users/authorize file and that it should be done in the 'default' file using 'unlang'. Is this correct so far? If so, can someone give me an example of the 'unlang' portion?
if (LDAP-Group != 'VPNgroup) { reject } LDAP should be replaced with the instance of the LDAP module you're using. -Arran
please don’t send email On Jul 23, 2015, at 02:12, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
Is this correct? [/etc/raddb/sites-available/default] ... authorize { preprocess rewrite_calling_station_id eap { ok = return updated = return } files ldap if (LDAP-Group != 'VPN-Internal') { reject } ntlm_auth }
authenticate { #Auth-Type PAP { # pap #}
#Auth-Type CHAP { # chap #} Auth-Type ldap { ldap } Auth-Type MS-CHAP { mschap } #digest eap } ...
On Wednesday, July 22, 2015 12:11 PM, Arran Cudbard-Bell <a.cudbardb@freeradius.org> wrote:
On Jul 22, 2015, at 11:59 AM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point. I would like to use FreeRADIUS to authenticate VPN users and wireless, and I'm working on VPN right now. From what I understand so far, I want to use LDAP to check if the person is in the right group first, and if not reject them. If they are in the right group then authenticate using ntlm_auth. I am also understanding that the place to do this is no longer the users/authorize file and that it should be done in the 'default' file using 'unlang'. Is this correct so far? If so, can someone give me an example of the 'unlang' portion?
if (LDAP-Group != 'VPNgroup) { reject }
LDAP should be replaced with the instance of the LDAP module you're using.
-Arran
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
please don’t send email On Jul 23, 2015, at 02:12, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
Is this correct? [/etc/raddb/sites-available/default] ... authorize { preprocess rewrite_calling_station_id eap { ok = return updated = return } files ldap if (LDAP-Group != 'VPN-Internal') { reject } ntlm_auth }
authenticate { #Auth-Type PAP { # pap #}
#Auth-Type CHAP { # chap #} Auth-Type ldap { ldap } Auth-Type MS-CHAP { mschap } #digest eap } ...
On Wednesday, July 22, 2015 12:11 PM, Arran Cudbard-Bell <a.cudbardb@freeradius.org> wrote:
On Jul 22, 2015, at 11:59 AM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point. I would like to use FreeRADIUS to authenticate VPN users and wireless, and I'm working on VPN right now. From what I understand so far, I want to use LDAP to check if the person is in the right group first, and if not reject them. If they are in the right group then authenticate using ntlm_auth. I am also understanding that the place to do this is no longer the users/authorize file and that it should be done in the 'default' file using 'unlang'. Is this correct so far? If so, can someone give me an example of the 'unlang' portion?
if (LDAP-Group != 'VPNgroup) { reject }
LDAP should be replaced with the instance of the LDAP module you're using.
-Arran
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point. I would like to use FreeRADIUS to authenticate VPN users and wireless, and I'm working on VPN right now. From what I understand so far, I want to use LDAP to check if the person is in the right group first, and if not reject them. If they are in the right group then authenticate using ntlm_auth. I am also understanding that the place to do this is no longer the users/authorize file and that it should be done in the 'default' file using 'unlang'. Is this correct so far? If so, can someone give me an example of the 'unlang' portion? i depends on the auth type. if the VPN is just a PAP request then you can use ntlm_auth *OR* kerberos. ntlm_auth config will need to be changed as its not challenge-response for PAP...krb5 just works. for wireless, thats PEAP or EAP-TTLS with MSCHAPv2 (ntlm_auth, standaard) or PAP (kerberos again).
as for doing it in 'default' - well, thats down to you and how you are going about things... I'd avoid touching the default server and create a duplicate, name it something else and configure clients.conf to point to that virtual-server..thus you can edit it, play with it and have the default server as 'virgin territory' to compare options and how the server shipped originally. man unlang for how to operate with unlang good starting point for understanding syntax and language - then look at resources (and the mailing list history is a great place... google for unlang ldap group membership etc alan
On Jul 22, 2015, at 5:59 PM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point.
Well, that's a new complaint. My guess is that you're looking at third-party web sites. i.e. google for things, and read random web pages. That's not going to work. Most of those are wrong. Read the Wiki. Read the doc pages on freeradius.org, and the pages they link to. Alan DeKok.
I'm sure it's not new, but yes I was looking at other websites and Google after I couldn't get things working reading the Wiki. I'll start over again with the Wiki, but the problem I had with the Wiki located at guide/FreeRADIUS Active Directory Integration HOWTO is that it's the bare minimum. It does not cover huntgroups, unlang, memberOf, etc. So if someone would like to update the Wiki for more advanced configurations, or point me to where those are already covered in the existing Wiki, I'd appreciate it. My guess is that they aren't covered or I'd likely have found them. As a result, off to third parties, Google, etc. and my "new (not new) complaint". | | | | | | | | | | | guide/FreeRADIUS Active Directory Integration HOWTOThis document describes how to set up FreeRADIUS server in order to authenticate Windows XP network users transparently against Active Directory. | | | | View on wiki.freeradius.org | Preview by Yahoo | | | | | On Wednesday, July 22, 2015 4:07 PM, Alan DeKok <aland@deployingradius.com> wrote: On Jul 22, 2015, at 5:59 PM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point.
Well, that's a new complaint. My guess is that you're looking at third-party web sites. i.e. google for things, and read random web pages. That's not going to work. Most of those are wrong. Read the Wiki. Read the doc pages on freeradius.org, and the pages they link to. Alan DeKok.
On 23-07-15 16:47, Scott Pickles via Freeradius-Users wrote:
... but the problem I had with the Wiki located at guide/FreeRADIUS Active Directory Integration HOWTO is that it's the bare minimum. It does not cover huntgroups, unlang, memberOf, etc.
There is no need for things like huntgroups or unlang if you need to get the connection to Active Directory working. If you need unlang, you can get information on it on the unlang page, not on the AD page. If you really need to do something custom, then there's no way that all these kind of special configurations that all these kind of configurations can possibly be added to the wiki. -- Herwin Weststrate
On Jul 23, 2015, at 10:47 AM, Scott Pickles <scottpickles@yahoo.com> wrote:
I'm sure it's not new, but yes I was looking at other websites and Google after I couldn't get things working reading the Wiki.
Then ask a question. It's not hard. Q: Hi, I'm following a guide on the Wiki at URL. I'm at step X and expected to see FOO. Instead I see BAR. What's up? A *HUGE* part of the reason why people run into issues is that they can't ask good questions.
I'll start over again with the Wiki, but the problem I had with the Wiki located at guide/FreeRADIUS Active Directory Integration HOWTO is that it's the bare minimum. It does not cover huntgroups, unlang, memberOf, etc.
That is a ridiculous request to make. Each page on the Wiki has ONE subject. If you want to read about 3 things, you've got to read 3 pages. That's how documentation works.
So if someone would like to update the Wiki for more advanced configurations, or point me to where those are already covered in the existing Wiki, I'd appreciate it.
Go to http://freeradius.org/. Look for the "documentation" link. Click on it. Look for "unlang". Clock on the link. On the same page, there's a clickable link for "configuration files". Click on it. If you read the "huntgroups" file, it contains documentation on what the file does, and how it works. If you read the starry of "radiusd.conf", it tells you to go read "man unlang". Or go to http://wiki.freeradius.org/. Click on the "search" box. Type "unlang" and hit <enter>. Or type "huntgroups", and hit <enter> How much easier does it have to be?
My guess is that they aren't covered or I'd likely have found them.
Nonsense. They're covered in excruciating detail. They're point
As a result, off to third parties, Google, etc. and my "new (not new) complaint".
The only reason you didn't find the existing documentation is that you didn't go to http://freeradius.org, and click on 2-3 *labelled* links. It's not that freaking hard. Quite frankly, this attitude is lazy and offensive. I've spent hundreds of hours documenting the server, and dozens of hours updating the web site so that the links are easy to find. Can you explain where we'd have to put the links so that someone like you can find them? Because: 1) putting the links in the config files doesn't work. You don't read them. 2) putting the links in the wiki doesn't work. You don't read them. 3) putting the links on freeradius.org doesn't work. You don't read them. Apparently for you, google is king. It MUST be on google, and it MUST NOT be on freeradius.org for you to consider it an "authoritative" source. Alan DeKok.
Alan - Thanks for the feedback. I don't want to down play at all the amount of effort you put into this. It's clear that you put in tons and tons of effort and I truly appreciate it. Even more so, I appreciate your willingness to respond to my inquiries on this list because quite frankly you don't have to. I did read the docs, and I can understand how you're coming to the conclusion that I don't because of what I've been posting as of late. The truth is I've been working really hard at this and can't get it to work so I apologize if some of how I'm coming across is out of frustration. I'm not lazy. I've put 40-60 hours into this so far, and have rebuilt several times. I'm to the point where I make one change, start the server, check for errors. If I'm good, I make the next change and so on. So here is what this has all come down to for me: I need to authenticate VPN users against AD. I want to use LDAP to check group, and ntlm_auth to check password. Trust me, I have read the docs but this is all new to me and I haven't been able to put it all together in context. I've been looking on Google to find out how others have perhaps put it all together. I learn some things from reading that stuff, and really what I'm after is an understanding of how it all works so I can configure it myself rather than just follow a preconfigured method that someone else used and UNDERSTAND what is happening. FreeRADIUS is obviously very powerful and with all of its features I'm looking forward to learning and understanding it better so I can make more use of it as time progresses. Going forward, I will be much more specific regarding what I have done so far, provide documentation of my configuration, provide clear and concise information regarding what I'm looking to accomplish, and with your expert assistance I think I'll eventually get to where I want to be. Again, thanks for all of your help and hanging in there with me. It is truly appreciated!!!! On Friday, July 24, 2015 7:09 AM, Alan DeKok <aland@deployingradius.com> wrote: On Jul 23, 2015, at 10:47 AM, Scott Pickles <scottpickles@yahoo.com> wrote:
I'm sure it's not new, but yes I was looking at other websites and Google after I couldn't get things working reading the Wiki.
Then ask a question. It's not hard. Q: Hi, I'm following a guide on the Wiki at URL. I'm at step X and expected to see FOO. Instead I see BAR. What's up? A *HUGE* part of the reason why people run into issues is that they can't ask good questions.
I'll start over again with the Wiki, but the problem I had with the Wiki located at guide/FreeRADIUS Active Directory Integration HOWTO is that it's the bare minimum. It does not cover huntgroups, unlang, memberOf, etc.
That is a ridiculous request to make. Each page on the Wiki has ONE subject. If you want to read about 3 things, you've got to read 3 pages. That's how documentation works.
So if someone would like to update the Wiki for more advanced configurations, or point me to where those are already covered in the existing Wiki, I'd appreciate it.
Go to http://freeradius.org/. Look for the "documentation" link. Click on it. Look for "unlang". Clock on the link. On the same page, there's a clickable link for "configuration files". Click on it. If you read the "huntgroups" file, it contains documentation on what the file does, and how it works. If you read the starry of "radiusd.conf", it tells you to go read "man unlang". Or go to http://wiki.freeradius.org/. Click on the "search" box. Type "unlang" and hit <enter>. Or type "huntgroups", and hit <enter> How much easier does it have to be?
My guess is that they aren't covered or I'd likely have found them.
Nonsense. They're covered in excruciating detail. They're point
As a result, off to third parties, Google, etc. and my "new (not new) complaint".
The only reason you didn't find the existing documentation is that you didn't go to http://freeradius.org, and click on 2-3 *labelled* links. It's not that freaking hard. Quite frankly, this attitude is lazy and offensive. I've spent hundreds of hours documenting the server, and dozens of hours updating the web site so that the links are easy to find. Can you explain where we'd have to put the links so that someone like you can find them? Because: 1) putting the links in the config files doesn't work. You don't read them. 2) putting the links in the wiki doesn't work. You don't read them. 3) putting the links on freeradius.org doesn't work. You don't read them. Apparently for you, google is king. It MUST be on google, and it MUST NOT be on freeradius.org for you to consider it an "authoritative" source. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Jul 24, 2015, at 2:24 PM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
Thanks for the feedback. I don't want to down play at all the amount of effort you put into this. It's clear that you put in tons and tons of effort and I truly appreciate it. Even more so, I appreciate your willingness to respond to my inquiries on this list because quite frankly you don't have to. I did read the docs, and I can understand how you're coming to the conclusion that I don't because of what I've been posting as of late. The truth is I've been working really hard at this and can't get it to work so I apologize if some of how I'm coming across is out of frustration.
Ask questions. Simple questions. *Good* questions.
I'm not lazy. I've put 40-60 hours into this so far, and have rebuilt several times. I'm to the point where I make one change, start the server, check for errors. If I'm good, I make the next change and so on. So here is what this has all come down to for me: I need to authenticate VPN users against AD. I want to use LDAP to check group, and ntlm_auth to check password. Trust me, I have read the docs but this is all new to me and I haven't been able to put it all together in context.
What context are you looking for? The main freeradius "doc" page also points to this: http://networkradius.com/doc/ The "Technical Guide" has a basic introduction to RADIUS, and how FreeRADIUS works.
I've been looking on Google to find out how others have perhaps put it all together.
I would suggest avoiding google, and third party sites. They are almost always old, broken, or wrong.
I learn some things from reading that stuff, and really what I'm after is an understanding of how it all works so I can configure it myself rather than just follow a preconfigured method that someone else used and UNDERSTAND what is happening.
That's why we recommend reading the debug output. It tells you what's happening. A packet comes in, and is processed through a series of rules. It is all described in excruciating detail in the debug output. In fact, there's so much detail that people sometimes ignore it...
FreeRADIUS is obviously very powerful and with all of its features I'm looking forward to learning and understanding it better so I can make more use of it as time progresses. Going forward, I will be much more specific regarding what I have done so far, provide documentation of my configuration, provide clear and concise information regarding what I'm looking to accomplish, and with your expert assistance I think I'll eventually get to where I want to be. Again, thanks for all of your help and hanging in there with me. It is truly appreciated!!!!
Please suggest *where* else we can post the links so that you will find the "unlang" and "huntgroups" documentation. Really. It was one of your complaints, and I can't for the life of me figure out where else it should go. It is rather obsessively documented in the configs, "man" pages, web pages, etc. Alan DeKok.
please don’t send email On Jul 25, 2015, at 02:24, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
Alan -
Thanks for the feedback. I don't want to down play at all the amount of effort you put into this. It's clear that you put in tons and tons of effort and I truly appreciate it. Even more so, I appreciate your willingness to respond to my inquiries on this list because quite frankly you don't have to. I did read the docs, and I can understand how you're coming to the conclusion that I don't because of what I've been posting as of late. The truth is I've been working really hard at this and can't get it to work so I apologize if some of how I'm coming across is out of frustration. I'm not lazy. I've put 40-60 hours into this so far, and have rebuilt several times. I'm to the point where I make one change, start the server, check for errors. If I'm good, I make the next change and so on. So here is what this has all come down to for me: I need to authenticate VPN users against AD. I want to use LDAP to check group, and ntlm_auth to check password. Trust me, I have read the docs but this is all new to me and I haven't been able to put it all together in context. I've been looking on Google to find out how others have perhaps put it all together. I learn some things from reading that stuff, and really what I'm after is an understanding of how it all works so I can configure it myself rather than just follow a preconfigured method that someone else used and UNDERSTAND what is happening. FreeRADIUS is obviously very powerful and with all of its features I'm looking forward to learning and understanding it better so I can make more use of it as time progresses. Going forward, I will be much more specific regarding what I have done so far, provide documentation of my configuration, provide clear and concise information regarding what I'm looking to accomplish, and with your expert assistance I think I'll eventually get to where I want to be. Again, thanks for all of your help and hanging in there with me. It is truly appreciated!!!!
On Friday, July 24, 2015 7:09 AM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 23, 2015, at 10:47 AM, Scott Pickles <scottpickles@yahoo.com> wrote: I'm sure it's not new, but yes I was looking at other websites and Google after I couldn't get things working reading the Wiki.
Then ask a question. It's not hard.
Q: Hi, I'm following a guide on the Wiki at URL. I'm at step X and expected to see FOO. Instead I see BAR. What's up?
A *HUGE* part of the reason why people run into issues is that they can't ask good questions.
I'll start over again with the Wiki, but the problem I had with the Wiki located at guide/FreeRADIUS Active Directory Integration HOWTO is that it's the bare minimum. It does not cover huntgroups, unlang, memberOf, etc.
That is a ridiculous request to make. Each page on the Wiki has ONE subject. If you want to read about 3 things, you've got to read 3 pages. That's how documentation works.
So if someone would like to update the Wiki for more advanced configurations, or point me to where those are already covered in the existing Wiki, I'd appreciate it.
Go to http://freeradius.org/. Look for the "documentation" link. Click on it. Look for "unlang". Clock on the link.
On the same page, there's a clickable link for "configuration files". Click on it.
If you read the "huntgroups" file, it contains documentation on what the file does, and how it works.
If you read the starry of "radiusd.conf", it tells you to go read "man unlang".
Or go to http://wiki.freeradius.org/. Click on the "search" box. Type "unlang" and hit <enter>. Or type "huntgroups", and hit <enter>
How much easier does it have to be?
My guess is that they aren't covered or I'd likely have found them.
Nonsense. They're covered in excruciating detail. They're point
As a result, off to third parties, Google, etc. and my "new (not new) complaint".
The only reason you didn't find the existing documentation is that you didn't go to http://freeradius.org, and click on 2-3 *labelled* links. It's not that freaking hard.
Quite frankly, this attitude is lazy and offensive. I've spent hundreds of hours documenting the server, and dozens of hours updating the web site so that the links are easy to find.
Can you explain where we'd have to put the links so that someone like you can find them? Because:
1) putting the links in the config files doesn't work. You don't read them.
2) putting the links in the wiki doesn't work. You don't read them.
3) putting the links on freeradius.org doesn't work. You don't read them.
Apparently for you, google is king. It MUST be on google, and it MUST NOT be on freeradius.org for you to consider it an "authoritative" source.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
please don’t send email On Jul 25, 2015, at 02:24, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
Alan -
Thanks for the feedback. I don't want to down play at all the amount of effort you put into this. It's clear that you put in tons and tons of effort and I truly appreciate it. Even more so, I appreciate your willingness to respond to my inquiries on this list because quite frankly you don't have to. I did read the docs, and I can understand how you're coming to the conclusion that I don't because of what I've been posting as of late. The truth is I've been working really hard at this and can't get it to work so I apologize if some of how I'm coming across is out of frustration. I'm not lazy. I've put 40-60 hours into this so far, and have rebuilt several times. I'm to the point where I make one change, start the server, check for errors. If I'm good, I make the next change and so on. So here is what this has all come down to for me: I need to authenticate VPN users against AD. I want to use LDAP to check group, and ntlm_auth to check password. Trust me, I have read the docs but this is all new to me and I haven't been able to put it all together in context. I've been looking on Google to find out how others have perhaps put it all together. I learn some things from reading that stuff, and really what I'm after is an understanding of how it all works so I can configure it myself rather than just follow a preconfigured method that someone else used and UNDERSTAND what is happening. FreeRADIUS is obviously very powerful and with all of its features I'm looking forward to learning and understanding it better so I can make more use of it as time progresses. Going forward, I will be much more specific regarding what I have done so far, provide documentation of my configuration, provide clear and concise information regarding what I'm looking to accomplish, and with your expert assistance I think I'll eventually get to where I want to be. Again, thanks for all of your help and hanging in there with me. It is truly appreciated!!!!
On Friday, July 24, 2015 7:09 AM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 23, 2015, at 10:47 AM, Scott Pickles <scottpickles@yahoo.com> wrote: I'm sure it's not new, but yes I was looking at other websites and Google after I couldn't get things working reading the Wiki.
Then ask a question. It's not hard.
Q: Hi, I'm following a guide on the Wiki at URL. I'm at step X and expected to see FOO. Instead I see BAR. What's up?
A *HUGE* part of the reason why people run into issues is that they can't ask good questions.
I'll start over again with the Wiki, but the problem I had with the Wiki located at guide/FreeRADIUS Active Directory Integration HOWTO is that it's the bare minimum. It does not cover huntgroups, unlang, memberOf, etc.
That is a ridiculous request to make. Each page on the Wiki has ONE subject. If you want to read about 3 things, you've got to read 3 pages. That's how documentation works.
So if someone would like to update the Wiki for more advanced configurations, or point me to where those are already covered in the existing Wiki, I'd appreciate it.
Go to http://freeradius.org/. Look for the "documentation" link. Click on it. Look for "unlang". Clock on the link.
On the same page, there's a clickable link for "configuration files". Click on it.
If you read the "huntgroups" file, it contains documentation on what the file does, and how it works.
If you read the starry of "radiusd.conf", it tells you to go read "man unlang".
Or go to http://wiki.freeradius.org/. Click on the "search" box. Type "unlang" and hit <enter>. Or type "huntgroups", and hit <enter>
How much easier does it have to be?
My guess is that they aren't covered or I'd likely have found them.
Nonsense. They're covered in excruciating detail. They're point
As a result, off to third parties, Google, etc. and my "new (not new) complaint".
The only reason you didn't find the existing documentation is that you didn't go to http://freeradius.org, and click on 2-3 *labelled* links. It's not that freaking hard.
Quite frankly, this attitude is lazy and offensive. I've spent hundreds of hours documenting the server, and dozens of hours updating the web site so that the links are easy to find.
Can you explain where we'd have to put the links so that someone like you can find them? Because:
1) putting the links in the config files doesn't work. You don't read them.
2) putting the links in the wiki doesn't work. You don't read them.
3) putting the links on freeradius.org doesn't work. You don't read them.
Apparently for you, google is king. It MUST be on google, and it MUST NOT be on freeradius.org for you to consider it an "authoritative" source.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
please don’t send email On Jul 23, 2015, at 22:47, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure it's not new, but yes I was looking at other websites and Google after I couldn't get things working reading the Wiki. I'll start over again with the Wiki, but the problem I had with the Wiki located at guide/FreeRADIUS Active Directory Integration HOWTO is that it's the bare minimum. It does not cover huntgroups, unlang, memberOf, etc. So if someone would like to update the Wiki for more advanced configurations, or point me to where those are already covered in the existing Wiki, I'd appreciate it. My guess is that they aren't covered or I'd likely have found them. As a result, off to third parties, Google, etc. and my "new (not new) complaint".
| | | | | | | | | | | guide/FreeRADIUS Active Directory Integration HOWTOThis document describes how to set up FreeRADIUS server in order to authenticate Windows XP network users transparently against Active Directory. | | | | View on wiki.freeradius.org | Preview by Yahoo | | | | |
On Wednesday, July 22, 2015 4:07 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 22, 2015, at 5:59 PM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point.
Well, that's a new complaint.
My guess is that you're looking at third-party web sites. i.e. google for things, and read random web pages. That's not going to work. Most of those are wrong.
Read the Wiki. Read the doc pages on freeradius.org, and the pages they link to.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
please don’t send email On Nov 19, 2018, at 20:16, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Jul 23, 2015, at 22:47, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure it's not new, but yes I was looking at other websites and Google after I couldn't get things working reading the Wiki. I'll start over again with the Wiki, but the problem I had with the Wiki located at guide/FreeRADIUS Active Directory Integration HOWTO is that it's the bare minimum. It does not cover huntgroups, unlang, memberOf, etc. So if someone would like to update the Wiki for more advanced configurations, or point me to where those are already covered in the existing Wiki, I'd appreciate it. My guess is that they aren't covered or I'd likely have found them. As a result, off to third parties, Google, etc. and my "new (not new) complaint".
| | | | | | | | | | | guide/FreeRADIUS Active Directory Integration HOWTOThis document describes how to set up FreeRADIUS server in order to authenticate Windows XP network users transparently against Active Directory. | | | | View on wiki.freeradius.org | Preview by Yahoo | | | | |
On Wednesday, July 22, 2015 4:07 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 22, 2015, at 5:59 PM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point.
Well, that's a new complaint.
My guess is that you're looking at third-party web sites. i.e. google for things, and read random web pages. That's not going to work. Most of those are wrong.
Read the Wiki. Read the doc pages on freeradius.org, and the pages they link to.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
please don’t send email On Nov 19, 2018, at 20:17, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Nov 19, 2018, at 20:16, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Jul 23, 2015, at 22:47, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure it's not new, but yes I was looking at other websites and Google after I couldn't get things working reading the Wiki. I'll start over again with the Wiki, but the problem I had with the Wiki located at guide/FreeRADIUS Active Directory Integration HOWTO is that it's the bare minimum. It does not cover huntgroups, unlang, memberOf, etc. So if someone would like to update the Wiki for more advanced configurations, or point me to where those are already covered in the existing Wiki, I'd appreciate it. My guess is that they aren't covered or I'd likely have found them. As a result, off to third parties, Google, etc. and my "new (not new) complaint".
| | | | | | | | | | | guide/FreeRADIUS Active Directory Integration HOWTOThis document describes how to set up FreeRADIUS server in order to authenticate Windows XP network users transparently against Active Directory. | | | | View on wiki.freeradius.org | Preview by Yahoo | | | | |
On Wednesday, July 22, 2015 4:07 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 22, 2015, at 5:59 PM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point.
Well, that's a new complaint.
My guess is that you're looking at third-party web sites. i.e. google for things, and read random web pages. That's not going to work. Most of those are wrong.
Read the Wiki. Read the doc pages on freeradius.org, and the pages they link to.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
please don’t send email On Nov 19, 2018, at 20:19, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Nov 19, 2018, at 20:17, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Nov 19, 2018, at 20:16, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Jul 23, 2015, at 22:47, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure it's not new, but yes I was looking at other websites and Google after I couldn't get things working reading the Wiki. I'll start over again with the Wiki, but the problem I had with the Wiki located at guide/FreeRADIUS Active Directory Integration HOWTO is that it's the bare minimum. It does not cover huntgroups, unlang, memberOf, etc. So if someone would like to update the Wiki for more advanced configurations, or point me to where those are already covered in the existing Wiki, I'd appreciate it. My guess is that they aren't covered or I'd likely have found them. As a result, off to third parties, Google, etc. and my "new (not new) complaint".
| | | | | | | | | | | guide/FreeRADIUS Active Directory Integration HOWTOThis document describes how to set up FreeRADIUS server in order to authenticate Windows XP network users transparently against Active Directory. | | | | View on wiki.freeradius.org | Preview by Yahoo | | | | |
On Wednesday, July 22, 2015 4:07 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 22, 2015, at 5:59 PM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point.
Well, that's a new complaint.
My guess is that you're looking at third-party web sites. i.e. google for things, and read random web pages. That's not going to work. Most of those are wrong.
Read the Wiki. Read the doc pages on freeradius.org, and the pages they link to.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
please don’t send email On Nov 19, 2018, at 20:19, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Nov 19, 2018, at 20:17, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Nov 19, 2018, at 20:16, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Jul 23, 2015, at 22:47, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure it's not new, but yes I was looking at other websites and Google after I couldn't get things working reading the Wiki. I'll start over again with the Wiki, but the problem I had with the Wiki located at guide/FreeRADIUS Active Directory Integration HOWTO is that it's the bare minimum. It does not cover huntgroups, unlang, memberOf, etc. So if someone would like to update the Wiki for more advanced configurations, or point me to where those are already covered in the existing Wiki, I'd appreciate it. My guess is that they aren't covered or I'd likely have found them. As a result, off to third parties, Google, etc. and my "new (not new) complaint".
| | | | | | | | | | | guide/FreeRADIUS Active Directory Integration HOWTOThis document describes how to set up FreeRADIUS server in order to authenticate Windows XP network users transparently against Active Directory. | | | | View on wiki.freeradius.org | Preview by Yahoo | | | | |
On Wednesday, July 22, 2015 4:07 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 22, 2015, at 5:59 PM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point.
Well, that's a new complaint.
My guess is that you're looking at third-party web sites. i.e. google for things, and read random web pages. That's not going to work. Most of those are wrong.
Read the Wiki. Read the doc pages on freeradius.org, and the pages they link to.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
please don’t send email On Nov 19, 2018, at 20:19, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Nov 19, 2018, at 20:17, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Nov 19, 2018, at 20:16, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Jul 23, 2015, at 22:47, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure it's not new, but yes I was looking at other websites and Google after I couldn't get things working reading the Wiki. I'll start over again with the Wiki, but the problem I had with the Wiki located at guide/FreeRADIUS Active Directory Integration HOWTO is that it's the bare minimum. It does not cover huntgroups, unlang, memberOf, etc. So if someone would like to update the Wiki for more advanced configurations, or point me to where those are already covered in the existing Wiki, I'd appreciate it. My guess is that they aren't covered or I'd likely have found them. As a result, off to third parties, Google, etc. and my "new (not new) complaint".
| | | | | | | | | | | guide/FreeRADIUS Active Directory Integration HOWTOThis document describes how to set up FreeRADIUS server in order to authenticate Windows XP network users transparently against Active Directory. | | | | View on wiki.freeradius.org | Preview by Yahoo | | | | |
On Wednesday, July 22, 2015 4:07 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 22, 2015, at 5:59 PM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point.
Well, that's a new complaint.
My guess is that you're looking at third-party web sites. i.e. google for things, and read random web pages. That's not going to work. Most of those are wrong.
Read the Wiki. Read the doc pages on freeradius.org, and the pages they link to.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
please don’t send email On Nov 19, 2018, at 20:17, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Nov 19, 2018, at 20:16, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Jul 23, 2015, at 22:47, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure it's not new, but yes I was looking at other websites and Google after I couldn't get things working reading the Wiki. I'll start over again with the Wiki, but the problem I had with the Wiki located at guide/FreeRADIUS Active Directory Integration HOWTO is that it's the bare minimum. It does not cover huntgroups, unlang, memberOf, etc. So if someone would like to update the Wiki for more advanced configurations, or point me to where those are already covered in the existing Wiki, I'd appreciate it. My guess is that they aren't covered or I'd likely have found them. As a result, off to third parties, Google, etc. and my "new (not new) complaint".
| | | | | | | | | | | guide/FreeRADIUS Active Directory Integration HOWTOThis document describes how to set up FreeRADIUS server in order to authenticate Windows XP network users transparently against Active Directory. | | | | View on wiki.freeradius.org | Preview by Yahoo | | | | |
On Wednesday, July 22, 2015 4:07 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 22, 2015, at 5:59 PM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point.
Well, that's a new complaint.
My guess is that you're looking at third-party web sites. i.e. google for things, and read random web pages. That's not going to work. Most of those are wrong.
Read the Wiki. Read the doc pages on freeradius.org, and the pages they link to.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
please don’t send email On Nov 19, 2018, at 20:19, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Nov 19, 2018, at 20:17, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Nov 19, 2018, at 20:16, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Jul 23, 2015, at 22:47, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure it's not new, but yes I was looking at other websites and Google after I couldn't get things working reading the Wiki. I'll start over again with the Wiki, but the problem I had with the Wiki located at guide/FreeRADIUS Active Directory Integration HOWTO is that it's the bare minimum. It does not cover huntgroups, unlang, memberOf, etc. So if someone would like to update the Wiki for more advanced configurations, or point me to where those are already covered in the existing Wiki, I'd appreciate it. My guess is that they aren't covered or I'd likely have found them. As a result, off to third parties, Google, etc. and my "new (not new) complaint".
| | | | | | | | | | | guide/FreeRADIUS Active Directory Integration HOWTOThis document describes how to set up FreeRADIUS server in order to authenticate Windows XP network users transparently against Active Directory. | | | | View on wiki.freeradius.org | Preview by Yahoo | | | | |
On Wednesday, July 22, 2015 4:07 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 22, 2015, at 5:59 PM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point.
Well, that's a new complaint.
My guess is that you're looking at third-party web sites. i.e. google for things, and read random web pages. That's not going to work. Most of those are wrong.
Read the Wiki. Read the doc pages on freeradius.org, and the pages they link to.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
please don’t send email On Nov 19, 2018, at 20:19, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Nov 19, 2018, at 20:17, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Nov 19, 2018, at 20:16, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Jul 23, 2015, at 22:47, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure it's not new, but yes I was looking at other websites and Google after I couldn't get things working reading the Wiki. I'll start over again with the Wiki, but the problem I had with the Wiki located at guide/FreeRADIUS Active Directory Integration HOWTO is that it's the bare minimum. It does not cover huntgroups, unlang, memberOf, etc. So if someone would like to update the Wiki for more advanced configurations, or point me to where those are already covered in the existing Wiki, I'd appreciate it. My guess is that they aren't covered or I'd likely have found them. As a result, off to third parties, Google, etc. and my "new (not new) complaint".
| | | | | | | | | | | guide/FreeRADIUS Active Directory Integration HOWTOThis document describes how to set up FreeRADIUS server in order to authenticate Windows XP network users transparently against Active Directory. | | | | View on wiki.freeradius.org | Preview by Yahoo | | | | |
On Wednesday, July 22, 2015 4:07 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 22, 2015, at 5:59 PM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point.
Well, that's a new complaint.
My guess is that you're looking at third-party web sites. i.e. google for things, and read random web pages. That's not going to work. Most of those are wrong.
Read the Wiki. Read the doc pages on freeradius.org, and the pages they link to.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
please don’t send email On Nov 19, 2018, at 20:19, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Nov 19, 2018, at 20:17, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Nov 19, 2018, at 20:16, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Jul 23, 2015, at 22:47, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure it's not new, but yes I was looking at other websites and Google after I couldn't get things working reading the Wiki. I'll start over again with the Wiki, but the problem I had with the Wiki located at guide/FreeRADIUS Active Directory Integration HOWTO is that it's the bare minimum. It does not cover huntgroups, unlang, memberOf, etc. So if someone would like to update the Wiki for more advanced configurations, or point me to where those are already covered in the existing Wiki, I'd appreciate it. My guess is that they aren't covered or I'd likely have found them. As a result, off to third parties, Google, etc. and my "new (not new) complaint".
| | | | | | | | | | | guide/FreeRADIUS Active Directory Integration HOWTOThis document describes how to set up FreeRADIUS server in order to authenticate Windows XP network users transparently against Active Directory. | | | | View on wiki.freeradius.org | Preview by Yahoo | | | | |
On Wednesday, July 22, 2015 4:07 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 22, 2015, at 5:59 PM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point.
Well, that's a new complaint.
My guess is that you're looking at third-party web sites. i.e. google for things, and read random web pages. That's not going to work. Most of those are wrong.
Read the Wiki. Read the doc pages on freeradius.org, and the pages they link to.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
please don’t send email On Nov 19, 2018, at 20:17, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Nov 19, 2018, at 20:16, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Jul 23, 2015, at 22:47, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure it's not new, but yes I was looking at other websites and Google after I couldn't get things working reading the Wiki. I'll start over again with the Wiki, but the problem I had with the Wiki located at guide/FreeRADIUS Active Directory Integration HOWTO is that it's the bare minimum. It does not cover huntgroups, unlang, memberOf, etc. So if someone would like to update the Wiki for more advanced configurations, or point me to where those are already covered in the existing Wiki, I'd appreciate it. My guess is that they aren't covered or I'd likely have found them. As a result, off to third parties, Google, etc. and my "new (not new) complaint".
| | | | | | | | | | | guide/FreeRADIUS Active Directory Integration HOWTOThis document describes how to set up FreeRADIUS server in order to authenticate Windows XP network users transparently against Active Directory. | | | | View on wiki.freeradius.org | Preview by Yahoo | | | | |
On Wednesday, July 22, 2015 4:07 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 22, 2015, at 5:59 PM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point.
Well, that's a new complaint.
My guess is that you're looking at third-party web sites. i.e. google for things, and read random web pages. That's not going to work. Most of those are wrong.
Read the Wiki. Read the doc pages on freeradius.org, and the pages they link to.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
please don’t send email On Nov 19, 2018, at 20:17, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Nov 19, 2018, at 20:16, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Jul 23, 2015, at 22:47, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure it's not new, but yes I was looking at other websites and Google after I couldn't get things working reading the Wiki. I'll start over again with the Wiki, but the problem I had with the Wiki located at guide/FreeRADIUS Active Directory Integration HOWTO is that it's the bare minimum. It does not cover huntgroups, unlang, memberOf, etc. So if someone would like to update the Wiki for more advanced configurations, or point me to where those are already covered in the existing Wiki, I'd appreciate it. My guess is that they aren't covered or I'd likely have found them. As a result, off to third parties, Google, etc. and my "new (not new) complaint".
| | | | | | | | | | | guide/FreeRADIUS Active Directory Integration HOWTOThis document describes how to set up FreeRADIUS server in order to authenticate Windows XP network users transparently against Active Directory. | | | | View on wiki.freeradius.org | Preview by Yahoo | | | | |
On Wednesday, July 22, 2015 4:07 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 22, 2015, at 5:59 PM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point.
Well, that's a new complaint.
My guess is that you're looking at third-party web sites. i.e. google for things, and read random web pages. That's not going to work. Most of those are wrong.
Read the Wiki. Read the doc pages on freeradius.org, and the pages they link to.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
please don’t send email On Nov 19, 2018, at 20:17, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Nov 19, 2018, at 20:16, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Jul 23, 2015, at 22:47, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure it's not new, but yes I was looking at other websites and Google after I couldn't get things working reading the Wiki. I'll start over again with the Wiki, but the problem I had with the Wiki located at guide/FreeRADIUS Active Directory Integration HOWTO is that it's the bare minimum. It does not cover huntgroups, unlang, memberOf, etc. So if someone would like to update the Wiki for more advanced configurations, or point me to where those are already covered in the existing Wiki, I'd appreciate it. My guess is that they aren't covered or I'd likely have found them. As a result, off to third parties, Google, etc. and my "new (not new) complaint".
| | | | | | | | | | | guide/FreeRADIUS Active Directory Integration HOWTOThis document describes how to set up FreeRADIUS server in order to authenticate Windows XP network users transparently against Active Directory. | | | | View on wiki.freeradius.org | Preview by Yahoo | | | | |
On Wednesday, July 22, 2015 4:07 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 22, 2015, at 5:59 PM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point.
Well, that's a new complaint.
My guess is that you're looking at third-party web sites. i.e. google for things, and read random web pages. That's not going to work. Most of those are wrong.
Read the Wiki. Read the doc pages on freeradius.org, and the pages they link to.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
please don’t send email On Nov 19, 2018, at 20:16, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Jul 23, 2015, at 22:47, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure it's not new, but yes I was looking at other websites and Google after I couldn't get things working reading the Wiki. I'll start over again with the Wiki, but the problem I had with the Wiki located at guide/FreeRADIUS Active Directory Integration HOWTO is that it's the bare minimum. It does not cover huntgroups, unlang, memberOf, etc. So if someone would like to update the Wiki for more advanced configurations, or point me to where those are already covered in the existing Wiki, I'd appreciate it. My guess is that they aren't covered or I'd likely have found them. As a result, off to third parties, Google, etc. and my "new (not new) complaint".
| | | | | | | | | | | guide/FreeRADIUS Active Directory Integration HOWTOThis document describes how to set up FreeRADIUS server in order to authenticate Windows XP network users transparently against Active Directory. | | | | View on wiki.freeradius.org | Preview by Yahoo | | | | |
On Wednesday, July 22, 2015 4:07 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 22, 2015, at 5:59 PM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point.
Well, that's a new complaint.
My guess is that you're looking at third-party web sites. i.e. google for things, and read random web pages. That's not going to work. Most of those are wrong.
Read the Wiki. Read the doc pages on freeradius.org, and the pages they link to.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
please don’t send email On Nov 19, 2018, at 20:17, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Nov 19, 2018, at 20:16, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Jul 23, 2015, at 22:47, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure it's not new, but yes I was looking at other websites and Google after I couldn't get things working reading the Wiki. I'll start over again with the Wiki, but the problem I had with the Wiki located at guide/FreeRADIUS Active Directory Integration HOWTO is that it's the bare minimum. It does not cover huntgroups, unlang, memberOf, etc. So if someone would like to update the Wiki for more advanced configurations, or point me to where those are already covered in the existing Wiki, I'd appreciate it. My guess is that they aren't covered or I'd likely have found them. As a result, off to third parties, Google, etc. and my "new (not new) complaint".
| | | | | | | | | | | guide/FreeRADIUS Active Directory Integration HOWTOThis document describes how to set up FreeRADIUS server in order to authenticate Windows XP network users transparently against Active Directory. | | | | View on wiki.freeradius.org | Preview by Yahoo | | | | |
On Wednesday, July 22, 2015 4:07 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 22, 2015, at 5:59 PM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point.
Well, that's a new complaint.
My guess is that you're looking at third-party web sites. i.e. google for things, and read random web pages. That's not going to work. Most of those are wrong.
Read the Wiki. Read the doc pages on freeradius.org, and the pages they link to.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
please don’t send email On Nov 19, 2018, at 20:17, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Nov 19, 2018, at 20:16, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Jul 23, 2015, at 22:47, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure it's not new, but yes I was looking at other websites and Google after I couldn't get things working reading the Wiki. I'll start over again with the Wiki, but the problem I had with the Wiki located at guide/FreeRADIUS Active Directory Integration HOWTO is that it's the bare minimum. It does not cover huntgroups, unlang, memberOf, etc. So if someone would like to update the Wiki for more advanced configurations, or point me to where those are already covered in the existing Wiki, I'd appreciate it. My guess is that they aren't covered or I'd likely have found them. As a result, off to third parties, Google, etc. and my "new (not new) complaint".
| | | | | | | | | | | guide/FreeRADIUS Active Directory Integration HOWTOThis document describes how to set up FreeRADIUS server in order to authenticate Windows XP network users transparently against Active Directory. | | | | View on wiki.freeradius.org | Preview by Yahoo | | | | |
On Wednesday, July 22, 2015 4:07 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 22, 2015, at 5:59 PM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point.
Well, that's a new complaint.
My guess is that you're looking at third-party web sites. i.e. google for things, and read random web pages. That's not going to work. Most of those are wrong.
Read the Wiki. Read the doc pages on freeradius.org, and the pages they link to.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
please don’t send email On Nov 19, 2018, at 20:17, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Nov 19, 2018, at 20:16, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Jul 23, 2015, at 22:47, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure it's not new, but yes I was looking at other websites and Google after I couldn't get things working reading the Wiki. I'll start over again with the Wiki, but the problem I had with the Wiki located at guide/FreeRADIUS Active Directory Integration HOWTO is that it's the bare minimum. It does not cover huntgroups, unlang, memberOf, etc. So if someone would like to update the Wiki for more advanced configurations, or point me to where those are already covered in the existing Wiki, I'd appreciate it. My guess is that they aren't covered or I'd likely have found them. As a result, off to third parties, Google, etc. and my "new (not new) complaint".
| | | | | | | | | | | guide/FreeRADIUS Active Directory Integration HOWTOThis document describes how to set up FreeRADIUS server in order to authenticate Windows XP network users transparently against Active Directory. | | | | View on wiki.freeradius.org | Preview by Yahoo | | | | |
On Wednesday, July 22, 2015 4:07 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 22, 2015, at 5:59 PM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point.
Well, that's a new complaint.
My guess is that you're looking at third-party web sites. i.e. google for things, and read random web pages. That's not going to work. Most of those are wrong.
Read the Wiki. Read the doc pages on freeradius.org, and the pages they link to.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
please don’t send email On Nov 19, 2018, at 20:16, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Jul 23, 2015, at 22:47, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure it's not new, but yes I was looking at other websites and Google after I couldn't get things working reading the Wiki. I'll start over again with the Wiki, but the problem I had with the Wiki located at guide/FreeRADIUS Active Directory Integration HOWTO is that it's the bare minimum. It does not cover huntgroups, unlang, memberOf, etc. So if someone would like to update the Wiki for more advanced configurations, or point me to where those are already covered in the existing Wiki, I'd appreciate it. My guess is that they aren't covered or I'd likely have found them. As a result, off to third parties, Google, etc. and my "new (not new) complaint".
| | | | | | | | | | | guide/FreeRADIUS Active Directory Integration HOWTOThis document describes how to set up FreeRADIUS server in order to authenticate Windows XP network users transparently against Active Directory. | | | | View on wiki.freeradius.org | Preview by Yahoo | | | | |
On Wednesday, July 22, 2015 4:07 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 22, 2015, at 5:59 PM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point.
Well, that's a new complaint.
My guess is that you're looking at third-party web sites. i.e. google for things, and read random web pages. That's not going to work. Most of those are wrong.
Read the Wiki. Read the doc pages on freeradius.org, and the pages they link to.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
please don’t send email On Nov 19, 2018, at 20:16, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Jul 23, 2015, at 22:47, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure it's not new, but yes I was looking at other websites and Google after I couldn't get things working reading the Wiki. I'll start over again with the Wiki, but the problem I had with the Wiki located at guide/FreeRADIUS Active Directory Integration HOWTO is that it's the bare minimum. It does not cover huntgroups, unlang, memberOf, etc. So if someone would like to update the Wiki for more advanced configurations, or point me to where those are already covered in the existing Wiki, I'd appreciate it. My guess is that they aren't covered or I'd likely have found them. As a result, off to third parties, Google, etc. and my "new (not new) complaint".
| | | | | | | | | | | guide/FreeRADIUS Active Directory Integration HOWTOThis document describes how to set up FreeRADIUS server in order to authenticate Windows XP network users transparently against Active Directory. | | | | View on wiki.freeradius.org | Preview by Yahoo | | | | |
On Wednesday, July 22, 2015 4:07 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 22, 2015, at 5:59 PM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point.
Well, that's a new complaint.
My guess is that you're looking at third-party web sites. i.e. google for things, and read random web pages. That's not going to work. Most of those are wrong.
Read the Wiki. Read the doc pages on freeradius.org, and the pages they link to.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
please don’t send email On Nov 19, 2018, at 20:16, Song Zou via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
please don’t send email
On Jul 23, 2015, at 22:47, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure it's not new, but yes I was looking at other websites and Google after I couldn't get things working reading the Wiki. I'll start over again with the Wiki, but the problem I had with the Wiki located at guide/FreeRADIUS Active Directory Integration HOWTO is that it's the bare minimum. It does not cover huntgroups, unlang, memberOf, etc. So if someone would like to update the Wiki for more advanced configurations, or point me to where those are already covered in the existing Wiki, I'd appreciate it. My guess is that they aren't covered or I'd likely have found them. As a result, off to third parties, Google, etc. and my "new (not new) complaint".
| | | | | | | | | | | guide/FreeRADIUS Active Directory Integration HOWTOThis document describes how to set up FreeRADIUS server in order to authenticate Windows XP network users transparently against Active Directory. | | | | View on wiki.freeradius.org | Preview by Yahoo | | | | |
On Wednesday, July 22, 2015 4:07 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 22, 2015, at 5:59 PM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point.
Well, that's a new complaint.
My guess is that you're looking at third-party web sites. i.e. google for things, and read random web pages. That's not going to work. Most of those are wrong.
Read the Wiki. Read the doc pages on freeradius.org, and the pages they link to.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
please don’t send email On Jul 23, 2015, at 22:47, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure it's not new, but yes I was looking at other websites and Google after I couldn't get things working reading the Wiki. I'll start over again with the Wiki, but the problem I had with the Wiki located at guide/FreeRADIUS Active Directory Integration HOWTO is that it's the bare minimum. It does not cover huntgroups, unlang, memberOf, etc. So if someone would like to update the Wiki for more advanced configurations, or point me to where those are already covered in the existing Wiki, I'd appreciate it. My guess is that they aren't covered or I'd likely have found them. As a result, off to third parties, Google, etc. and my "new (not new) complaint".
| | | | | | | | | | | guide/FreeRADIUS Active Directory Integration HOWTOThis document describes how to set up FreeRADIUS server in order to authenticate Windows XP network users transparently against Active Directory. | | | | View on wiki.freeradius.org | Preview by Yahoo | | | | |
On Wednesday, July 22, 2015 4:07 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 22, 2015, at 5:59 PM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point.
Well, that's a new complaint.
My guess is that you're looking at third-party web sites. i.e. google for things, and read random web pages. That's not going to work. Most of those are wrong.
Read the Wiki. Read the doc pages on freeradius.org, and the pages they link to.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
please don’t send email On Jul 22, 2015, at 23:59, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point. I would like to use FreeRADIUS to authenticate VPN users and wireless, and I'm working on VPN right now. From what I understand so far, I want to use LDAP to check if the person is in the right group first, and if not reject them. If they are in the right group then authenticate using ntlm_auth. I am also understanding that the place to do this is no longer the users/authorize file and that it should be done in the 'default' file using 'unlang'. Is this correct so far? If so, can someone give me an example of the 'unlang' portion?
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
please don’t send email On Jul 22, 2015, at 23:59, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm sure you're reading the subject going "ugh not another one". But there is so much documentation out there and all of it slightly different that I don't know which end is up at this point. I would like to use FreeRADIUS to authenticate VPN users and wireless, and I'm working on VPN right now. From what I understand so far, I want to use LDAP to check if the person is in the right group first, and if not reject them. If they are in the right group then authenticate using ntlm_auth. I am also understanding that the place to do this is no longer the users/authorize file and that it should be done in the 'default' file using 'unlang'. Is this correct so far? If so, can someone give me an example of the 'unlang' portion?
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (6)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Arran Cudbard-Bell -
Herwin Weststrate -
Scott Pickles -
Song Zou