Before I spend time researching/configuring this (like I did several years ago, failed and joined the FR box to AD), I would love it if someone can tell me if this is doable now, some pointers on HOW would be great too if it is. I have a need to put together a freeradius box that can authenticate wireless users using MSCHAPv2 PEAP. I do not want to join the Linux box running FR to AD domain, I simply want to use LDAP and authenticate wireless users, the LDAP is really windows AD runing on server 2012. so is this a support config or must I join the FR Linux box to MS AD environment for this to work? Thanks,
On Apr 14, 2016, at 10:47 AM, Agent Smith via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
Before I spend time researching/configuring this (like I did several years ago, failed and joined the FR box to AD), I would love it if someone can tell me if this is doable now, some pointers on HOW would be great too if it is.
http://deployingradius.com/documents/configuration/active_directory.html
I have a need to put together a freeradius box that can authenticate wireless users using MSCHAPv2 PEAP. I do not want to join the Linux box running FR to AD domain,
That's nice, but you're limited by what AD can do.
I simply want to use LDAP and authenticate wireless users, the LDAP is really windows AD runing on server 2012. so is this a support config or must I join the FR Linux box to MS AD environment for this to work?
Follow the guide. It will work. There are really no other options at this point. Alan DeKok.
Your only other option is to proxy the authentication to NPS on a Windows server. Using LDAP for PEAP authentication is not possible Regards Max -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+max.caines=wlv.ac.uk@lists.freeradius.org] On Behalf Of Agent Smith via Freeradius-Users Sent: 14 April 2016 15:48 To: freeradius-users@lists.freeradius.org Subject: MSCHAP2 PEAP +Win2012AD _ LDAP + FR Before I spend time researching/configuring this (like I did several years ago, failed and joined the FR box to AD), I would love it if someone can tell me if this is doable now, some pointers on HOW would be great too if it is. I have a need to put together a freeradius box that can authenticate wireless users using MSCHAPv2 PEAP. I do not want to join the Linux box running FR to AD domain, I simply want to use LDAP and authenticate wireless users, the LDAP is really windows AD runing on server 2012. so is this a support config or must I join the FR Linux box to MS AD environment for this to work? Thanks, - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Agent Smith -
Alan DeKok -
Caines, Max