HELP: radtest fails local test

[Jacob Jarick]

smb.conf http://pastebin.ca/437671
radius.conf http://pastebin.ca/437670
clients.conf http://pastebin.ca/437668
eap.conf http://pastebin.ca/437667
krb5.conf http://pastebin.ca/437666

OK, some more googling :P
and Ive turned up this intresting howto which I will be trialing:
http://deployingradius.com/documents/configuration/active_directory.html

It covers Configuring FreeRADIUS to use ntlm_auth in a bit more detail
than the last one.

On 4/13/07, Jacob Jarick <mem.namefix at gmail.com> wrote:
> Freeradius 1.1.3
> smb.conf http://pastebin.ca/437671
> radius.conf http://pastebin.ca/437670
> clients.conf http://pastebin.ca/437668
> eap.conf http://pastebin.ca/437667
> krb5.conf http://pastebin.ca/437666
>
> How do I configure the users file to authenticate against the AD, the
> howto I followed says u do not need to configure the users file.
> I read the users.txt man page but it wasnt any help.
>
> My krb5.conf is properly configured, running ntlm_auth from the
> command line works perfectly.
>
> Is there any howto that actually covers this properly.
>
>
> On 4/13/07, Alan DeKok <aland at deployingradius.com> wrote:
> > Jacob Jarick wrote:
> > > A local test using radtest fails but I am unsure why. It looks like
> > > its trying to authenticate against the unix passwd file,
> >
> >   Yes.  See the "users" file.  It sets authentication to /etc/passwd (or
> > system) if there's no other method set.
> >
> > > I only need
> > > FR to auth against our w2k3 AD server. Any help is appreciated.
> >
> >   For PAP authentication, you have to configure that manually.  i.e.
> > tell the server "if you receive PAP, run ntlm_auth to authenticate
> > against AD".  See the "exec" module for how to run external programs.
> >
> >   It looks like you didn't tell the server to authenticate against AD.
> > Please do so.
> >
> >   Alan DeKok.
> > --
> >   http://deployingradius.com       - The web site of the book
> >   http://deployingradius.com/blog/ - The blog
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
> >
>