Freeradius authentification against Kerberos
Stefan.Paetow at ja.net
Wed Jul 23 16:52:37 CEST 2014
AFAIK, Kerberos needs PAP authentication, so PEAP with MSCHAPv2 is already off the table.
Kerberos is an authentication oracle, so it requires the plain-text password for the user. MSCHAPv2 does not expose that password.
From: freeradius-users-bounces+stefan.paetow=ja.net at lists.freeradius.org [mailto:freeradius-users-bounces+stefan.paetow=ja.net at lists.freeradius.org] On Behalf Of Benjamin Stahl
Sent: 23 July 2014 14:55
To: Freeradius Mailing-List
Subject: Freeradius authentification against Kerberos
I’m a newbie with Freeserver. It is my first time with it. I try to make a configuration against Kerberos with your freeradius-server on centOS 6.5.
I use FreeRadius 2.1.12
But now I got everytime the error: „no authenticate method (Auth-Type) found for the request“. So every user got a reject.
I setup the server like explained at this tutorial from eduroam.us<http://eduroam.us>: https://www.eduroam.us/node/45
My problem is also that a PEAP - MSCHAPv2 auth from a Windows 7 - PC does not work.
Can anyone help me, please?
I attached the logs.
Thanks, and best Benjamin.
Janet(UK) is a trading name of Jisc Collections and Janet Limited, a
not-for-profit company which is registered in England under No. 2881024
and whose Registered Office is at Lumen House, Library Avenue,
Harwell Oxford, Didcot, Oxfordshire. OX11 0SG. VAT No. 614944238
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Freeradius-Users