Apple announces FreeRADIUS in Mac OSX Leopard
http://www.apple.com/server/macosx/leopard/more.html What they don't say on that page is that FreeRADIUS is the server of choice. This means that in 2007, there will probably be 10's of 1000's of additional installations of FreeRADIUS. Once Leopard comes out, I think I'll update the main web page to say that FreeRADIUS is the #1 RADIUS server on the planet. I'm not sure of any other server with an install base of 100k individual sites... Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Hi folks, now thats coincidence! I was just up to install FreeRADIUS on one of our Mac OS X 10.4 Servers and was about seeking help in doing so. Since I do not want to wait until 2007, is there any resource that shows me how to compile FreeRADIUS on Mac OS X 10.4.x? Thanks, Stephan Am 11.08.2006 um 18:54 schrieb Alan DeKok:
http://www.apple.com/server/macosx/leopard/more.html
What they don't say on that page is that FreeRADIUS is the server of choice.
This means that in 2007, there will probably be 10's of 1000's of additional installations of FreeRADIUS.
Once Leopard comes out, I think I'll update the main web page to say that FreeRADIUS is the #1 RADIUS server on the planet. I'm not sure of any other server with an install base of 100k individual sites...
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/ users.html
-- Stephan Budach Jung von Matt/it-services GmbH Glashüttenstrasse 79 20357 Hamburg Tel: +49 (40) 4321-1353 Fax: +49 (40) 4321-1114 http://www.jvm.de
Stephan Budach <stephan.budach@jvm.de> wrote:
Since I do not want to wait until 2007, is there any resource that shows me how to compile FreeRADIUS on Mac OS X 10.4.x?
Download, configure, and make? Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Hi Alan, he he, I did that already. On my MacBook Pro, I got some errors about some libraries, which made try again on a PPC machine. configure and make were successful, but upon installing, there was some error about installing the libraries. Install complained about a missing directory in /usr/local/lib, which does not created. I currently can't provide the install errors but I will on monday. I was just curious if anyone has already built FreeRADIUS on Mac OS X (Server) 10.4.x. My next question would be about hooking FreeRADUIS to our OpenDirectory server, which likely is only a matter of authLDAP. Regards, Stephan Am 11.08.2006 um 20:42 schrieb Alan DeKok:
Stephan Budach <stephan.budach@jvm.de> wrote:
Since I do not want to wait until 2007, is there any resource that shows me how to compile FreeRADIUS on Mac OS X 10.4.x?
Download, configure, and make?
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/ users.html
-- Stephan Budach Jung von Matt/it-services GmbH Glashüttenstrasse 79 20357 Hamburg Tel: +49 (40) 4321-1353 Fax: +49 (40) 4321-1114 http://www.jvm.de
After much struggling, I discovered darwinports. http:// www.opendarwin.org It installed freeradius with very little effort and it works great. On Aug 11, 2006, at 1:05 PM, Stephan Budach wrote:
Hi folks,
now thats coincidence!
I was just up to install FreeRADIUS on one of our Mac OS X 10.4 Servers and was about seeking help in doing so.
Since I do not want to wait until 2007, is there any resource that shows me how to compile FreeRADIUS on Mac OS X 10.4.x?
Thanks, Stephan
Am 11.08.2006 um 18:54 schrieb Alan DeKok:
http://www.apple.com/server/macosx/leopard/more.html
What they don't say on that page is that FreeRADIUS is the server of choice.
This means that in 2007, there will probably be 10's of 1000's of additional installations of FreeRADIUS.
Once Leopard comes out, I think I'll update the main web page to say that FreeRADIUS is the #1 RADIUS server on the planet. I'm not sure of any other server with an install base of 100k individual sites...
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
-- Stephan Budach
Jung von Matt/it-services GmbH Glashüttenstrasse 79 20357 Hamburg
Tel: +49 (40) 4321-1353 Fax: +49 (40) 4321-1114
-List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
----------------------------- All e-mail to and from this address is subject to the Acceptable Use Policies of Community High School District #155. All e-mail may be monitored and/or disclosed to third parties. Any views or opinions presented in an e-mail are solely those of the author and may not represent those of Community High School District #155. Community High School District #155 http://www.d155.org
Hmm, Darwinports is just in the stage of going dark, as it is stated on the website, but I will give it a try. Thanks, Stephan Am 11.08.2006 um 21:10 schrieb Brad Lachel:
After much struggling, I discovered darwinports. http:// www.opendarwin.org It installed freeradius with very little effort and it works great.
On Aug 11, 2006, at 1:05 PM, Stephan Budach wrote:
Hi folks,
now thats coincidence!
I was just up to install FreeRADIUS on one of our Mac OS X 10.4 Servers and was about seeking help in doing so.
Since I do not want to wait until 2007, is there any resource that shows me how to compile FreeRADIUS on Mac OS X 10.4.x?
Thanks, Stephan
Am 11.08.2006 um 18:54 schrieb Alan DeKok:
http://www.apple.com/server/macosx/leopard/more.html
What they don't say on that page is that FreeRADIUS is the server of choice.
This means that in 2007, there will probably be 10's of 1000's of additional installations of FreeRADIUS.
Once Leopard comes out, I think I'll update the main web page to say that FreeRADIUS is the #1 RADIUS server on the planet. I'm not sure of any other server with an install base of 100k individual sites...
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
-- Stephan Budach
Jung von Matt/it-services GmbH Glashüttenstrasse 79 20357 Hamburg
Tel: +49 (40) 4321-1353 Fax: +49 (40) 4321-1114
-List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
----------------------------- All e-mail to and from this address is subject to the Acceptable Use Policies of Community High School District #155. All e-mail may be monitored and/or disclosed to third parties. Any views or opinions presented in an e-mail are solely those of the author and may not represent those of Community High School District #155.
Community High School District #155 http://www.d155.org
-List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
-- Stephan Budach Jung von Matt/it-services GmbH Glashüttenstrasse 79 20357 Hamburg Tel: +49 (40) 4321-1353 Fax: +49 (40) 4321-1114 http://www.jvm.de
This page is a very good starting place (I'm assuming your primary goal is to authenticate wireless users): http://homepage.mac.com/andreaswolf/public/wpaeap.html Nathan
From: Stephan Budach <stephan.budach@jvm.de> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Date: Fri, 11 Aug 2006 20:05:28 +0200 To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Apple announces FreeRADIUS in Mac OSX Leopard
Hi folks,
now thats coincidence!
I was just up to install FreeRADIUS on one of our Mac OS X 10.4 Servers and was about seeking help in doing so.
Since I do not want to wait until 2007, is there any resource that shows me how to compile FreeRADIUS on Mac OS X 10.4.x?
Thanks, Stephan
Hi Nathan, yes, the goal is to authenticate wireless users. I have already taken a look at Andreas' web page, but the information seems a bit outdated to me. At this time I am wondering whether to go with darwinports' freeradius package or with one of the other two installers. Actually I can't figure out what this "experimental" opendirectory plugim is about and if its part of the regular FreeRADIUS source. The final setup I want to achieve is to have three groups of Accesspoints, one for internal users, one for freelancers and one for guests. The access to these accesspoints should be controlled by three corresponding groups on our OpenDirectory server, without the need to have these clients manually added to the clients file. Okay, maintaining the clients file could be done with a script as well. Is this possible with FreeRADIUS? Thanks, Stephan Am 12.08.2006 um 20:32 schrieb Nathan L. Cable:
This page is a very good starting place (I'm assuming your primary goal is to authenticate wireless users):
http://homepage.mac.com/andreaswolf/public/wpaeap.html
Nathan
From: Stephan Budach <stephan.budach@jvm.de> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Date: Fri, 11 Aug 2006 20:05:28 +0200 To: FreeRadius users mailing list <freeradius- users@lists.freeradius.org> Subject: Re: Apple announces FreeRADIUS in Mac OSX Leopard
Hi folks,
now thats coincidence!
I was just up to install FreeRADIUS on one of our Mac OS X 10.4 Servers and was about seeking help in doing so.
Since I do not want to wait until 2007, is there any resource that shows me how to compile FreeRADIUS on Mac OS X 10.4.x?
Thanks, Stephan
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/ users.html
-- Stephan Budach Jung von Matt/it-services GmbH Glashüttenstrasse 79 20357 Hamburg Tel: +49 (40) 4321-1353 Fax: +49 (40) 4321-1114 http://www.jvm.de
Sorry about the long delay on the response. I'll try to add something of value to the discussion... The information on the page is dated, but it's accurate. You can also ignore some of the information, as the current stable version of FreeRadius seems to have everything set up and ready to go. All you need to do is enable the relevant sections of eap.conf (using the test certificates works), and add an entry for the base station in clients.conf. I don't run FR on a Mac server, but I did a quick test before sending this email, and everything compiled fine. Make sure you read the Mac relevant docs in the /doc directory of the distribution - there's a couple of important notes about compiling. As for grouping the access points, check out /doc/Autz-type. It describes how to set up different realms. I tried doing just that, but I haven't had any success with it. I'm going to do a separate post in the immediate future. Let me know if you've had any luck! Nathan On 8/13/06 1:22 AM, "Stephan Budach" <stephan.budach@jvm.de> wrote:
Hi Nathan,
yes, the goal is to authenticate wireless users. I have already taken a look at Andreas' web page, but the information seems a bit outdated to me.
At this time I am wondering whether to go with darwinports' freeradius package or with one of the other two installers. Actually I can't figure out what this "experimental" opendirectory plugim is about and if its part of the regular FreeRADIUS source.
The final setup I want to achieve is to have three groups of Accesspoints, one for internal users, one for freelancers and one for guests. The access to these accesspoints should be controlled by three corresponding groups on our OpenDirectory server, without the need to have these clients manually added to the clients file. Okay, maintaining the clients file could be done with a script as well.
Is this possible with FreeRADIUS?
Thanks, Stephan
Hi Nathan, thanks for your replay - I really appreciate it. I have been busy myself with some other issues and had no time to dive deeper into FR on the Mac - but I will and I will also share any information I gain with the list. Thanks, Stephan Am 18.08.2006 um 18:48 schrieb Nathan Cable:
Sorry about the long delay on the response. I'll try to add something of value to the discussion...
The information on the page is dated, but it's accurate. You can also ignore some of the information, as the current stable version of FreeRadius seems to have everything set up and ready to go. All you need to do is enable the relevant sections of eap.conf (using the test certificates works), and add an entry for the base station in clients.conf.
I don't run FR on a Mac server, but I did a quick test before sending this email, and everything compiled fine. Make sure you read the Mac relevant docs in the /doc directory of the distribution - there's a couple of important notes about compiling.
As for grouping the access points, check out /doc/Autz-type. It describes how to set up different realms. I tried doing just that, but I haven't had any success with it. I'm going to do a separate post in the immediate future.
Let me know if you've had any luck!
Nathan
On 8/13/06 1:22 AM, "Stephan Budach" <stephan.budach@jvm.de> wrote:
Hi Nathan,
yes, the goal is to authenticate wireless users. I have already taken a look at Andreas' web page, but the information seems a bit outdated to me.
At this time I am wondering whether to go with darwinports' freeradius package or with one of the other two installers. Actually I can't figure out what this "experimental" opendirectory plugim is about and if its part of the regular FreeRADIUS source.
The final setup I want to achieve is to have three groups of Accesspoints, one for internal users, one for freelancers and one for guests. The access to these accesspoints should be controlled by three corresponding groups on our OpenDirectory server, without the need to have these clients manually added to the clients file. Okay, maintaining the clients file could be done with a script as well.
Is this possible with FreeRADIUS?
Thanks, Stephan
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/ users.html
-- Stephan Budach Jung von Matt/it-services GmbH Glashüttenstrasse 79 20357 Hamburg Tel: +49 (40) 4321-1353 Fax: +49 (40) 4321-1114 http://www.jvm.de
Wow! Congratulations! The only problem with this is: expect an incredible increase of number of questions on this list in 3... 2... 1... Stefan -- Stefan WINTER Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche - Ingénieur de recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg
Stefan Winter <stefan.winter@restena.lu> wrote:
Congratulations! The only problem with this is: expect an incredible increase of number of questions on this list in 3... 2... 1...
In April or so. And I hope to have my book done by then, including a chapter on Leopard. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
participants (6)
-
Alan DeKok -
Brad Lachel -
Nathan Cable -
Nathan L. Cable -
Stefan Winter -
Stephan Budach