Free radius authentication with AD using ldap

Vikash Gounder Vikash.Gounder at acu.edu.au
Tue Nov 29 00:29:33 CET 2011


So in this case what changes do I need to make in order for it to work.

Sorry am bit lost right now.

Thanks and appreciate it.

Sent from my iPhone

On 29/11/2011, at 10:22 AM, "Fajar A. Nugraha" <list at fajar.net> wrote:

> On Tue, Nov 29, 2011 at 4:03 AM, Vikash Gounder
> <Vikash.Gounder at acu.edu.au> wrote:
>> Hi Fajar,
>> 
>> Thanks so much for replying.
>> 
>> The debug log for local test against AD is attached:
>> 
>> Listening on authentication address * port 1812
>> Listening on accounting address * port 1813
>> Listening on command file /var/run/radiusd/radiusd.sock
>> Listening on proxy address * port 1814
>> Ready to process requests.
>> 
>> rad_recv: Access-Request packet from host 127.0.0.1 port 35067, id=16, length=61
>>        User-Name = "uldaptest"
> 
> See this line?
>>        User-Password = "usk.173n!"
> 
>> [ldap] user DN: CN=Unilinc ldaptest,OU=System Accounts,OU=Generic Accounts,DC=acustaff,DC=acu,DC=edu,DC=au
>> rlm_ldap: (re)connect to acustaff.acu.edu.au:3268, authentication 1
>> rlm_ldap: bind as CN=Unilinc ldaptest,OU=System Accounts,OU=Generic Accounts,DC=acustaff,DC=acu,DC=edu,DC=au/usk.173n! to acustaff.acu.edu.au:3268
>> rlm_ldap: waiting for bind result ...
>> rlm_ldap: Bind was successful
>> [ldap] user uldaptest authenticated succesfully
> 
> This is ldap bind. It'll work if the user password is available as
> plain text in the request (e.g. using PAP with radtest). It will not
> work if the user password is not available in the request (e.g.
> PEAP-MSCHAP-v2)
> 
>> I got a question for you?? If only using for WPA, do I also need to configure samba and use nltm_auth, since this radius device will be used by ipad, netbooks etc etc etc....
> 
> Yes, since you set your AP to use WPA2/radius auth the clients will
> usually use EAP-PEAP-MSCHAPv2, where user password is not available as
> plain text in the request.
> 
> -- 
> Fajar
> 
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html




More information about the Freeradius-Users mailing list