Questions about freeradius, ntlm_auth and windows groups
Hi to all, I have a freeradius 1.0.4 (upgrade to 1.0.5 is nearly coming...) with ntlm_auth on a Windows 2000 PDC. With the standard authentication with ntlm calls there is no problem. Now my question is that: is possible to assign some ip pools based on the user-group on the PDC? A quick example... i have a user called user01 with group free. The freeradius must look if the user belongs to group free (group on the PDC, not on unix) and if yes, it assign the ip pool like 10.0.1.0 to 10.0.1.10. If have another group, like only_internet, the radius must assign an ip in the pool of 10.0.1.11 to 10.0.1.20. Something like that is possible? I think yes....but how? I have searched into the previous post of the list, without any good results... someone can help me? Tnx in advance, Claudio Prono.
Claudio <claudio@mediaservice.net> wrote:
I have a freeradius 1.0.4 (upgrade to 1.0.5 is nearly coming...) with ntlm_auth on a Windows 2000 PDC. With the standard authentication with ntlm calls there is no problem. Now my question is that: is possible to assign some ip pools based on the user-group on the PDC?
User group checks can be done with standard LDAP queries, which you can then tie into the IPPool. Alan DeKok.
Alan DeKok wrote:
Claudio <claudio@mediaservice.net> wrote:
I have a freeradius 1.0.4 (upgrade to 1.0.5 is nearly coming...) with ntlm_auth on a Windows 2000 PDC. With the standard authentication with ntlm calls there is no problem. Now my question is that: is possible to assign some ip pools based on the user-group on the PDC?
User group checks can be done with standard LDAP queries, which you can then tie into the IPPool.
Tnx for the advice...but there is no way to do it with ntlm and not LDAP ? Is more simple, and the calls can be done with wbinfo and other tools.... i think is possible, but how ? Claudio.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- ------------ Claudio Prono Systems Development @ Mediaservice.net Srl, Divisione Sicurezza Dati Via San Bernardino, 17 - 10141 Torino (TO) - IT Tel +39-011-32.72.100 Fax +39-011-32.46.497 PGP Fingerprint: 75C2 4049 E23D 2FBF A65F 40DB EA5C 11AC C2B0 3647 Disclaimer: http://mediaservice.net/disclaimer ------------
participants (2)
-
Alan DeKok -
Claudio