I think these are the good points to start: https://www.eduroam.us/node/90 http://wiki.freeradius.org/modules/Rlm_krb5
I You'll be succeeded how-to will be awesome ;-) 09.12.2015 19:52, Randy Morgan пишет: > Hello, > > We are setting up our wireless to authenticate against FreeRadius and > FreeIPA. I am looking for any instructions on how to integrate radius > with IPA. We can get them talking via kerberos, but when we have a > wireless client attempt to authenticate against them, the password > gets stripped out and only the username gets passed on, resulting in a > failed logon attempt. > > As we have studied the problem we have identified the communication > protocols used by wireless to pass on the user credentials to radius. > Wireless uses EAP as it's primary protocol. We are running Xirrus > wireless APs and from what we can learn, they act only as a pass > through conduit for the client. Ideally we would like them to speak > PEAP TTLS, this would allow kerberos to process from the client to the > IPA server, we are still researching this. > > Are there any instructions on how to integrate FreeRadius 3.0.10 with > FreeIPA 3.3.5? Any help would be appreciated. > > Randy > -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
