MSCHAP2 PEAP +Win2012AD _ LDAP + FR

Alan DeKok aland at deployingradius.com
Thu Apr 14 16:57:26 CEST 2016


On Apr 14, 2016, at 10:47 AM, Agent Smith via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
> 
> Before I spend time researching/configuring this (like I did several years ago, failed and joined the FR box to AD), I would love it if someone can tell me if this is doable now, some pointers on HOW would be great too if it is.

http://deployingradius.com/documents/configuration/active_directory.html

> I have a need to put together a freeradius box that can authenticate wireless users using MSCHAPv2 PEAP. I do not want to join the Linux box running FR to AD domain,

  That's nice, but you're limited by what AD can do.

> I simply want to use LDAP and authenticate wireless users, the LDAP is really windows AD runing on server 2012.
> so is this a support config or must I join the FR Linux box to MS AD environment for this to work?

  Follow the guide.  It will work.

  There are really no other options at this point.

  Alan DeKok.





More information about the Freeradius-Users mailing list