Major noob question about freeradius
Hi everyone maybe you can help me. I have a small network of about 10 windows XP machines. I need to set these machines up so that my users can log into any of these machines. For me the simplest solution to solve this would be a windows 2003 server domain controller. Unfortunately due to some corporate restrictions I cannot install a windows server. I was told that a Radius server could accomplish the same thing for me. Is this true? Basically I just need a way for my users to sit down at any of the windows XP workstations and log into it. I don't need anything special like "roaming profiles" and such. All I need is for a way for a windows user to sit down at any computer and type in a user name and password in order to gain access to use the computer. I saw the tutorials online but I don't think this is what I need. Something about setting up a VPN and adding certs and such. I need freeRadius to control access to user the computer not to gain access to a network resource. I have installed freeRadius and got it up and running on openSUSE but I am not really sure how to configure it according to what I need (if it can be done at all). Am I making sense or am I way off base? Does someone have a document I can follow that will tell me how to configure freeradius so that my windows users can authenticate against it? thanks _________________________________________________________________ Hotmail: Trusted email with powerful SPAM protection. http://clk.atdmt.com/GBL/go/196390707/direct/01/
On Mon, Jan 18, 2010 at 11:51:28AM -0700, Bryan Boone wrote:
I have a small network of about 10 windows XP machines. I need to set these machines up so that my users can log into any of these machines.
I was told that a Radius server could accomplish the same thing for me. Is this true?
Basically I just need a way for my users to sit down at any of the windows XP workstations and log into it. I don't need anything special like "roaming profiles" and such.
Yes, google for pGina -- 2. That which causes joy or happiness.
On Mon, Jan 18, 2010 at 10:51 AM, Bryan Boone <bryan-boone@msn.com> wrote:
I have a small network of about 10 windows XP machines. I need to set these machines up so that my users can log into any of these machines.
For me the simplest solution to solve this would be a windows 2003 server domain controller. Unfortunately due to some corporate restrictions I cannot install a windows server.
I was told that a Radius server could accomplish the same thing for me. Is this true?
Bryan: I'm not the ultimate FreeRADIUS authority, but I think you'll find RADIUS is a poor solution for this, if indeed a solution at all. If you can't set up a Windows server to do this job, the best way to meet this need is to run Samba on a Linux machine. If you run it in domain control mode, it'll act very much like a Windows server for the purposes you're talking about. Check out http://samba.org/ for details on Samba. And for what it's worth I would lean toward using CentOS as the core platform (of course opinions vary on this point). The book "Samba-3 by Example" gives an excellent guide to the setup if you need one. It's available online at http://www.samba.org/samba/docs/man/Samba-Guide/ Good luck! E. -- Eric Swanson, swanson@technologypartnerds.com Director of Marketing & Sales / Senior Technical Staff Technology Partnerds 888-NERDS-55
Hi,
I'm not the ultimate FreeRADIUS authority, but I think you'll find RADIUS is a poor solution for this, if indeed a solution at all.
I'd say the same thing - SAMBA on a Linux box will easily do this in the 'windows way'. to use FreeRADIUS to control windows login (ie system login) you need to install extra Gina things - and pGina is the best of these (though no longer developed IIRC) FreeRADIUS is the main King when it comes to network login - either 802.1X on wired, wireless (WPA/WPA2 enterprise) or even backend system for captive portal alan
participants (4)
-
Alan Buxey -
Bryan Boone -
Eric Swanson -
Josip Rodin