AD integration

[Phil Mayers]

On 10/28/2011 09:18 PM, Whitlow, Michael wrote:
> Hello,
>
> I just got Freeradius running on Ubuntu and have successfully configured
> integration Active Directory using Samba and NTLM_AUTH.
>
> When I run “radtest” against Freeradius and put in AD credentials, it is
> successful.

Word of caution: radtest does not do EAP authentication, so you're not 
testing the full authentication path. You may want to download the 
"wpa_supplicant" sources and do a "make eapol_test" and use that to verify.

>
> My next goal is to configure Freeradius to assign 802.1X VLANs for a
> wireless environment.
>
> In other words, users who are a member of ADGROUP1 get assigned vlan #
> 111, and users who are a member of ADGROUP2 get assigned vlan #222.
>
> I am unclear which direction to go to accomplish this.

Unclear in what respect, precisely?

If you're asking "how do I lookup a users AD groups", there are several 
possible ways. A lot of people do it via the "ldap" module.

If you're asking something else, please specify.