Re: freeradius and machine account authentication
Norbert Wegener <nw at sbs.de <http://lists.freeradius.org/mailman/listinfo/freeradius-users>> wrote: / FreeRADIUS at this time cannot perform machine account authentications, />>/ but it supports proxying them off to another RADIUS server (for example, />>/ IAS, or FUNK) /> After recent changes to both FreeRADIUS and Samba, this is now supported. See the list archives for details.
Alan DeKok. I searched the archives and found this or that discussion about that topic in general. Nevertheless I did not find any hint on how to configure freeradius to perform machine account authentication. Maybe someone has a pointer for me, as even in freeradius-snapshot-20051104 a grep for machine account was not successfull.
Another question comes up in that context: What job has samba to solve here? Must the server, that runs freeradius, be member of the active diretory domain and samba is used for this? Which version of samba must at least be used? Thanks Norbert Wegener
Norbert Wegener <nw@sbs.de> wrote:
I searched the archives and found this or that discussion about that topic in general. Nevertheless I did not find any hint on how to configure freeradius to perform machine
I typed the following into google: freeradius-users machine authentication The first link was this: http://archives.free.net.ph/message/20051019.171819.b3193dd3.en.html which includes instructions and configuration examples.
Another question comes up in that context: What job has samba to solve here? Must the server, that runs freeradius, be member of the active diretory domain and samba is used for this?
Samba does the Windows login protocol nonsense that FreeRADIUS doesn't.
Which version of samba must at least be used?
The post contains the answer. Alan DeKok.
participants (2)
-
Alan DeKok -
Norbert Wegener