Radius Integration with Active Directory

[Alan DeKok]

Raheel Itrat wrote:
> I have installed a freeradius machine on ubuntu server, now my boss
> wants me to integrate it with the Active directory so that the users can
> be authenticated through it. I was wondering design wise does it make
> sense to have a free radius server in between if we can run radius on
> the windows machine itself? what are security best practices in this case?

  FreeRADIUS doesn't (yet) run on Windows.  Just run it on another server.

  Or, run it on a VMware image on the Windows server.  It will use
minimal CPU, disk, and RAM.

  Alan DeKok.