connect FreeIPA to Freeradius

[Alan DeKok]

On Dec 13, 2018, at 7:56 AM, mustafa taha <mustafa.taha.mu95 at gmail.com> wrote:
> 
> 
> I am new user of freeradius . I want to connect FreeIPA server to radius  server to make WiFi authentication . 
> I have tried to connect them by Kerberos

  That likely won't work.  See my site:

http://deployingradius.com/documents/protocols/compatibility.html

  Kerberos isn't listed there, but it's the same as the 5 right-hand columns.

> but if I use radtest this logs will show : 
> ...
> (0) krb5: Attempting to authenticate against service principal
> (0) krb5: ERROR: Error verifying credentials (13): Permission denied
> ...
> I try to solve “ krb5: ERROR: Error verifying credentials (13): Permission denied “ but I cloudn’t find any useful information about that . 

  It's an error from the Kerberos server.  The RADIUS server doesn't have permission to authenticate that user.

  Alan DeKok.