RE: Active Directory and FreeRadius
Well I can use pam_krb5, but what I am trying to accomplish here is that I have quite a few Linux workstation on my network and I thought if I can setup those Linux workstation to point to the radius server where they login using there Active Directory credentials. So I am not sure if this can be done or not? But would like hear if anybody who has done something similar to what I am doing. Thanks, -----Original Message----- From: Alan DeKok [mailto:aland@ox.org] Sent: Wednesday, July 13, 2005 2:58 PM To: FreeRadius users mailing list Subject: Re: Active Directory and FreeRadius "Talwar, Puneet (NIH/NIAID)" <PTALWAR@niaid.nih.gov> wrote:
I was able to auth against AD by setting up KRB5 on RHEL. Now I would like to setup freeradius where I will have bunch of UNIX workstation that will point to the freeradius server using pam_radius_auth module and will auth against radius server using their AD credentials.
Why not just use pam_krb5? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
"Talwar, Puneet (NIH/NIAID)" <PTALWAR@niaid.nih.gov> wrote:
Well I can use pam_krb5, but what I am trying to accomplish here is that I have quite a few Linux workstation on my network and I thought if I can setup those Linux workstation to point to the radius server where they login using there Active Directory credentials.
You said that already. What you may not know is that AD implements Kerberos. You can use pam_krb5 on the Linux boxes to do *exactly* the same thing, but without using RADIUS at all. Alan DeKok.
Radius is not realy apropriate personaly id take a look at http://www.wlug.org.nz/ActiveDirectorySamba and http://mirrors.techiesabode.com/linuxgazette/101/levkovich.html
Well I can use pam_krb5, but what I am trying to accomplish here is that I have quite a few Linux workstation on my network and I thought if I can setup those Linux workstation to point to the radius server where they login using there Active Directory credentials.
So I am not sure if this can be done or not? But would like hear if anybody who has done something similar to what I am doing.
Thanks,
participants (3)
-
Alan DeKok -
Michael Fisher -
Talwar, Puneet (NIH/NIAID)