Freeradius + AD + Cisco authetication

[Jevos, Peter]

Hello friends

 

I was reading few tutorials regarding the Cisco authetication against
Freeradius and Windows AD.

Actually  I'm not really clever, because main tutorial on the main pages
is connected with the older version , and there are more version of the
Freradius 2.0, a bit different:

http://wiki.freeradius.org/FreeRADIUS_Active_Directory_Integration_HOWTO

http://deployingradius.com/documents/configuration/active_directory.html

http://www.eduroamus.org/node/44

 

However, I have working and running samba and ntlm:

 

Linux#/usr/bin/ntlm_auth --request-nt-key --domain=MYDOMAIN
--username=MYNAME --require-membership-of='DOMAIN+DOMAIN_GROUP'

 

It returns OK.

 

Can somebody please help me how to finish the freeradius configuration (
the NAS server will be cisco )

I know that there should be the entries in users file, eap file, mschap
or ntlm_aut modules.

But what should be the proper syntax I really don't know 

 

My aim should be:

1. authenticate users that belong to some certain domain group , as is
showed in the ntlm_auth command above ( for the Cisco vpn client users )

2. authenticate users to have privilege ( 15 ) access to the router

 

Now I'm using IAS server, and I want to move to the FreeRadius

Cisco configuration is solved and works without any problems.

What remains is freeradius config

 

Thank you

 

BR

 

Pet

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20100702/879307e7/attachment.html>