Using LDAPS with Freeradius

[Peter Lambrechtsen]

That is the only way it works. And if it's working and you should see an
established tcp connection to the ldap server on port 636.
If it wasn't encrypted it would be on port 389. So it's encrypted.

On Tue, 21 Jan 2020, 18:25 Byron Jeffery, <byronjeffery at cem.org.au> wrote:

> Hi Everyone
>
> I am attempting to setup LDAPS on our Freeradius server on Ubuntu that is
> querying an Active Directory server for users group memberships, and
> hoping for a few guidelines on the correct setup procedure.
>
> So far I have exported the self signed PEM SSL cert form the AD server and
> imported it into /etc/freeradius/certs.
> In /etc/freeradius/mods-enabled/ldap, I also specified the Port = 636 and
> under the TLS section, pointed the ca_file = ${certdir}/ to the
> certificate, enabled ca_path = ${certdir} and set require_cert    =
> 'allow'.
>
> The radius authentication's are working but would like to confirm if this
> is the best way to go about enabling LDAPS.
>
>    - Kind Regards
>
>    - Byron Jeffery
>    - Assisting ICT Manager
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html