Hi, > I am new to FreeRADIUS. I would like to set up FreeRADIUS, such that the > AS proxies the Kerberos authentication request from the access point to > the Kerberos KDC and the access point grants access to the wired network > upon successful authentication.
can the AP do kerberos? if so, why the RADIUS? what you probably mean is that you will take a user/pass from a client as their login - PAP/captive portal? or EAP-TTLS/PAP ? what rlm_krb5 is take those details and use the system kerberos (eg stuff all done via /etc/krb5.conf etc) so auth against your kerberos KDC system - MS AD or whatever it is. so long as your krb5 environment is fine - eg 'kinit someuser' works, then rlm_krb5 does its job very well thanks - we've got 3 different installations doing that alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
