freeRadius auth. with Active Directory and LDAP
Hi I want that my freeRadius validates users against Active Directory with LDAP. For configuration reasons, I can't use NTLM. Did any of you guys already configured a freeRADIUS and AD with LDAP ? Is this posible? Thanks in advance ,
Did any of you guys already configured a freeRADIUS and AD with LDAP ? Is this posible?
Yes, if the incoming request from the user contains his password in cleartext. No, if he is using any sort of non-reversible encryption. Stefan -- Stefan WINTER Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingenieur Forschung & Entwicklung 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg E-Mail: stefan.winter@restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Robert wrote:
Hi I want that my freeRadius validates users against Active Directory with LDAP. For configuration reasons, I can't use NTLM.
Did any of you guys already configured a freeRADIUS and AD with LDAP ? Is this posible?
Thanks in advance ,
I've done that, but the password needs to be in clear, that is PAP needs to be used. See: http://tldp.org/HOWTO/archived/LDAP-Implementation-HOWTO/radius.html http://wiki.freeradius.org/Rlm_ldap (at the end see Directory Compatibility) - -- ============== +----------------------------------------------+ Martin Gadbois | "Windows might take you from 0 to 60 faster, | S/W Developer | but to go to 100 you need Unix." | Colubris Networks Inc. +----------------------------------------------+ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFbZP99Y3/iTTCEDkRAikgAJwMGVCH2AuV5XT1N3u/mpZnn6wITwCeJcuy wWQ0qCw9w8wNp8Q43p1FbYo= =+9V4 -----END PGP SIGNATURE-----
participants (3)
-
Martin Gadbois -
Robert -
Stefan Winter