|
Dear Everyone, My
objective is to enable to connect our RAS users using NT domain user database
using freeradius under in linux
operating system. The modules that suggested doing
this using pam_winbind to unify login between NT
domain and Linux system box. I already configure and
successfully login my NT domain users in Linux box. Then, we come up to have our
RAS users to authenticate using freeradius under our Linux
thru NT domain users since we already unify our login authentication in
network. I read in freeradius archive for this kind
of setup and one of his test machines is successfully working but the other
machine is not. I
try to use the radtest utility in freeradius
for loopback testing. I can login and authenticate
the users exist in Linux system but using the NT domain account, it always display
below the error: Is there any configuration in my radius.conf
file to be tweak to recognize my NT domain users? What approach should I use to
achieve this setup and guide to work it? Please HELP. Many thanks. auth: type "System" modcall: entering group authenticate modcall[authenticate]: module "unix"
returns notfound modcall: group authenticate returns notfound auth: Failed to validate the user. Login incorrect: [jungab/[EMAIL PROTECTED]] (from client renault port 1812) Below
the configuration in my /etc/pam.d/radiusd and /etc/pam.d/smb-auth:- radiusd: #%PAM-1.0 auth
required
/lib/security/pam_securetty.so auth
required
/lib/security/pam_stack.so service=smb-auth auth
required
/lib/security/pam_nologin.so account required /lib/security/pam_stack.so service=smb-auth password required /lib/security/pam_stack.so service=smb-auth session required /lib/security/pam_stack.so service=smb-auth session optional /lib/security/pam_console.so smb-auth: #%PAM-1.0 auth
required
/lib/security/pam_env.so auth
sufficient
/lib/security/pam_winbind.so auth
required
/lib/security/pam_deny.so account sufficient /lib/security/pam_winbind.so account required /lib/security/pam_unix.so password required /lib/security/pam_cracklib.so retry=3 type= password sufficient /lib/security/pam_unix.so nullok use_authtok md5 shadow password required /lib/security/pam_deny.so session required /lib/security/pam_limits.so session required /lib/security/pam_unix.so Does
anyone have some suggestion and ideas how will I resolved my objective? I'm
quite already desperate to work it and so far no success at all. Many thanks
again. Regards, |
