Rob Verduijn <[EMAIL PROTECTED]> wrote:
> The one I like is I build a radius server on linux which checks the user
> account information against our windows domain, so that if they create
> an account on the windows domain the radius server needs additional user
> account to allow this user access to our network.
> Is this possible ?

  Yes.  See "rlm_smb" in the server.

  You'll want the latest CVS snapshot of that module, though, as the
one in 0.9.3 has security issues.

> I give the windows administrators access to aformentioned linux radius
> server and teach them how to add users.

  Put the users in a database.  If they know database stuff, or if
there's a gui (see: webmin), then the windows admins won't even know
it's Linux.

> The one I fear
> 
> I build a microsoft isa server which does the authenticating.

  That will work, too.  But as soon as something goes wrong, IAS will
say "failed!", and nothing more.  Very helpful.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to