Freeradius PEAP/MSCHAPv2 against Apple OpenDirectory
Hello, We want to setup freeRADIUS with Peap/MSCHAPv2 talk to Apple Open Directory. I found this option 'use_open_directory'. But looks we need to install freeRADIUS on the same machine with Open Directory.(https://lists.freeradius.org/pipermail/freeradius-users/2010-February/msg003...) Do we have to run freeRADIUS on the same machine with OpenDirectory? Is there a work-around that we can run freeRADIUS seperate from OpenDirectory? Best. John
John wrote:
Hello, We want to setup freeRADIUS with Peap/MSCHAPv2 talk to Apple Open Directory. I found this option 'use_open_directory'. But looks we need to install freeRADIUS on the same machine with Open Directory.(https://lists.freeradius.org/pipermail/freeradius-users/2010-February/msg003...)
Do we have to run freeRADIUS on the same machine with OpenDirectory?
Yes.
Is there a work-around that we can run freeRADIUS seperate from OpenDirectory?
OpenDirectory is an LDAP server. Configure that way in FreeRADIUS. It might work. Alan DeKok.
I configured the LDAP module talks to Open Directory, based on the debug looks the password fetched from OD, but the authentication always failed. Is there any guide for freeRADIUS+ldap+OD integrating? I setup freeRADIUS talks to OpenLDAP, it works well. Can OD return cleartext password like OpenLDAP do? John. --- 10年3月15日，周一, Alan DeKok <aland@deployingradius.com> 写道： 发件人: Alan DeKok <aland@deployingradius.com> 主题: Re: Freeradius PEAP/MSCHAPv2 against Apple OpenDirectory 收件人: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> 日期: 2010年3月15日,周一,下午12:59 John wrote:
Hello, We want to setup freeRADIUS with Peap/MSCHAPv2 talk to Apple Open Directory. I found this option 'use_open_directory'. But looks we need to install freeRADIUS on the same machine with Open Directory.(https://lists.freeradius.org/pipermail/freeradius-users/2010-February/msg003...) Do we have to run freeRADIUS on the same machine with OpenDirectory?
Yes.
Is there a work-around that we can run freeRADIUS seperate from OpenDirectory?
OpenDirectory is an LDAP server. Configure that way in FreeRADIUS. It might work. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alan DeKok -
John