Hi guys Is there any way to get FreeRadius to authenticate to an Active Directory without using ntlm and winbind? My intention would be for FreeRadius itself to connect to the AD and check the credentials. Thank you very much. Att Daniel William Reif
On Tue, Nov 08, 2016 at 02:30:31PM -0500, Alan DeKok wrote:
On Nov 8, 2016, at 2:23 PM, Daniel Reif <danielwreif@gmail.com> wrote:
Is there any way to get FreeRadius to authenticate to an Active Directory without using ntlm and winbind?
If there was such a way, we would be using it.
Exactly. The only other method is trying to do an LDAP bind for auth. That will *only* work for PAP methods. Matthew -- Matthew Newton, Ph.D. <mcn4@leicester.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
Hi,
Is there any way to get FreeRadius to authenticate to an Active Directory without using ntlm and winbind? My intention would be for FreeRadius itself to connect to the AD and check the credentials.
well, depends on what Auth you are using. for EAp-TTLS/PAP you could do it with direct LDAP to the AD. but for most common purposes, you are looking at winbind as the best option , or ntlm_auth as second best (to do the challenge/repsonse MSCHAPv2 stuff that most people want/need - eg PEAP or EAP-TTLS/MSCHAPv2. the only other way would be direct LSA authentication and the only products that do that have interesting partnerships with Microsoft or have to be running on Windows for the access. alan
participants (4)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Daniel Reif -
Matthew Newton