802.1x using Active Directory as Freeradius's Backed
Hi All, My company will implement WPA2-Enterprise as wireless user authentication method. We already use Active Directory so we want use that AD as authentication service for freeradius too. I already config the freeradius based on these link : http://wiki.freeradius.org/guide/FreeRADIUS-Active-Directory-Integration-HOW... this link http://deployingradius.com/documents/configuration/active_directory.html https://www.eduroam.us/node/44 but no good so far, we always failed to authenticate users. Attached debug output. Regards Andi Mappesona
Hi,
http://wiki.freeradius.org/guide/FreeRADIUS-Active-Directory-Integration-HOW...
dont use that method. use this: http://deployingradius.com/documents/configuration/active_directory.html alan
Except check with your AD people that they allow ntlmv1 auth requests. The docn doesn’t mention that. Our systems people have been politely asking me when they can turn off ntlmv1 and just use ntlmv2 as theres a big security hole in ntlmv1. Rgds Alex On 18 Dec 2013, at 11:27, A.L.M.Buxey@lboro.ac.uk wrote:
Hi,
http://wiki.freeradius.org/guide/FreeRADIUS-Active-Directory-Integration-HOW...
dont use that method. use this:
http://deployingradius.com/documents/configuration/active_directory.html
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi, ...and your current thing is failing due to incorrect password...it states. however, I dont not see the ntlm_auth actually being run.....probably because of this:
Tue Dec 17 17:11:55 2013 : Debug: including configuration file /etc/raddb/modules/mschap.backup
Tue Dec 17 17:11:55 2013 : Debug: Module: Instantiating module "mschap" from file /etc/raddb/modules/mschap.backup Tue Dec 17 17:11:55 2013 : Debug: mschap { Tue Dec 17 17:11:55 2013 : Debug: use_mppe = yes Tue Dec 17 17:11:55 2013 : Debug: require_encryption = no Tue Dec 17 17:11:55 2013 : Debug: require_strong = no Tue Dec 17 17:11:55 2013 : Debug: with_ntdomain_hack = no Tue Dec 17 17:11:55 2013 : Debug: allow_retry = yes Tue Dec 17 17:11:55 2013 : Debug: }
so, mschap module is the backup copy. the server reads ALL files in the modules directory....do not leave old random stuff lying around in that directory. alan
participants (3)
-
A.L.M.Buxey＠lboro.ac.uk -
Alex Sharaz -
Andi Mappesona