FreeRADIUS + Microsoft Active Directory
Hi, Is it possible integrate FreeRADIUS 3.x and Microsoft Active Directory without any active directory credential ? Best Regards,
On Jun 7, 2017, at 11:34 AM, Amir Kalhori <kalhori@live.com> wrote:
Is it possible integrate FreeRADIUS 3.x and Microsoft Active Directory without any active directory credential ?
FreeRADIUS can do anonymous queries, but it's limited to information returned by anonymous queries. Perhaps you could explain why you need to query AD without any credentials. And, what you expect to get from AD when you query it without credentials. Alan DeKok.
Hi Alan, Actually I want FreeRADIUS authentication process against Active Directory but I do not allowed to use any AD credential. Currently I have a Microsoft Active Directory , a Mikrotik router as a hotpot server. I want to install FreeRADIUS with MySQL and connect it to the Active Directory for authentication. Is there anyway to do this without AD credential ? Best Regards, Amir
On Jun 7, 2017, at 1:54 PM, Amir Kalhori <kalhori@live.com> wrote:
Actually I want FreeRADIUS authentication process against Active Directory but I do not allowed to use any AD credential.
I have no idea what that means.
Currently I have a Microsoft Active Directory , a Mikrotik router as a hotpot server. I want to install FreeRADIUS with MySQL and connect it to the Active Directory for authentication.
Is there anyway to do this without AD credential ?
Install FreeRADIUS and configure AD / LDAP by following the documentation. If it works, fine. If not, then it doesn't work. i.e. asking the same question over and over isn't useful. It's better to understand what the requirements are, and how the systems work. Or, just try it, and see if it works. Alan DeKok.
Hi There are basically three ways FreeRadius can authenticate against AD: 1. Using LDAP. This is unlikely to work except in special circumstances, as AD does not by default make the password available in any attribute FreeRadius can read. In addition, unless your AD has very weak security, you will need credentials to read entries using LDAP. 2. Using Samba or Winbind (which is part of Samba). This involves the FR server becoming a member of the AD domain. You will need credentials to carry out that step, though once the relationship exists, you won't need them again. 3. By proxying the incoming RADIUS requests that require authentication to a Microsoft NPS server. NPS is Microsoft's RADIUS implementation, but it's much less flexible that FR. It also has some eccentricities, and doesn't stick to the standards very well, but we, like (I think) a few other UK universities, are currently using it for this. That doesn't require any credentials, but it does require a Windows server running NPS Hope that helps Max -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+max.caines=wlv.ac.uk@lists.freeradius.org] On Behalf Of Amir Kalhori Sent: 07 June 2017 16:35 To: freeradius-users@lists.freeradius.org Subject: FreeRADIUS + Microsoft Active Directory Hi, Is it possible integrate FreeRADIUS 3.x and Microsoft Active Directory without any active directory credential ? Best Regards, - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Alan DeKok -
Amir Kalhori -
Caines, Max