Hello all I am looking to use Freeradius and Active Directory along with adding members to a group to secure telnet access to Cisco devices. I am looking for sugestions on the best way to do this. I have read though the how to at:http://wiki.freeradius.org/FreeRADIUS_Active_Directory_Integration_HO WTO But I am not sure this is what I am trying to do. Any input is welcomed. Thanks, Bert Beaudin Systems Administrator RelianceGlobalcom Services, Inc. Office:303-785-6641 Cell:303-478-7789 Fax:415-677-9534 bbeaudin@relianceglobalcom.com <mailto:bbeaudin@relianceglobalcom.com> www.relianceglobalcom.com <blocked::http://www.yipes.com/>
Updated guide: http://deployingradius.com/documents/configuration/active_directory.html Since Cisco is going to send pap requests you should also configure AD in ldap section in order to retrieve (at least) password (NT-Password attribute) and group (Ldap-Group attribute) information. With them you should be able to authenticate and authorize Cisco admin access. Ivan Kalik Kalik Informatika ISP Dana 2/10/2008, "Bert Beaudin" <bbeaudin@relianceglobalcom.com> piše:
Hello all
I am looking to use Freeradius and Active Directory along with adding members to a group to secure telnet access to Cisco devices. I am looking for sugestions on the best way to do this. I have read though the how to at:http://wiki.freeradius.org/FreeRADIUS_Active_Directory_Integration_HO WTO
But I am not sure this is what I am trying to do. Any input is welcomed.
Thanks,
Bert Beaudin Systems Administrator RelianceGlobalcom Services, Inc. Office:303-785-6641 Cell:303-478-7789 Fax:415-677-9534 bbeaudin@relianceglobalcom.com <mailto:bbeaudin@relianceglobalcom.com> www.relianceglobalcom.com <blocked::http://www.yipes.com/>
Bert Beaudin wrote:
I am looking to use Freeradius and Active Directory along with adding members to a group to secure telnet access to Cisco devices. I am looking for sugestions on the best way to do this.
Configure AD as an LDAP server, and use the LDAP-Group attribute to check group membership. Alan DeKok.
participants (3)
-
Alan DeKok -
Bert Beaudin -
tnt@kalik.net