LDAP and/or Active Directory

[Alan DeKok]

David Peterson wrote:
> I have a WiMax customer who would like to authorize against an Active
> directory server.  I noticed in the inner-tunnel config it says that the
> Auth-Type LDAP means that EAP won't work.

  Yes.  LDAP is a database, not an authentication server.  FreeRADIUS is
an authentication server.

>  Am I misunderstanding how to
> properly set up LDAP?  Or would the active directory set up be better for an
> authorization requiring EAP-TTLS.

  Active Directory isn't really an LDAP server.  At least, not where it
matters.

  http://deployingradius.com/documents/protocols/compatibility.html

  And:
  http://deployingradius.com/documents/configuration/active_directory.html

  Alan DeKok.