Alan Lehman <[EMAIL PROTECTED]> wrote:
It seems like there is not a good explanation in any one place on
how to set this up. Most of what follows was assembled from existing
documentation. It took a while to piece these steps togather and
make it work, so I thought I would share how I did it.
I'm all in favour of including something like this in the server documentation. But I don't see why we would include with FreeRADIUS instructions for using IAS.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I think instructions for interfacing with Microsoft domains in some manner is important. There are millions of people using Microsoft servers and providing the means to authenticate users to an existing MS domain would be very valuable to many users. Now if someone would come up with a version of FreeRadius server that would work on NT and W2003 server (or some other method to authenticate to an NT domain and AD), I would be completely in favor of taking that approach instead of using IAS. I looked briefly pam_smb, but as best as I could determine, it will not work with AD. AFAIK, IAS is the only means to authenticate users to AD.
Alan Lehman
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
