I think freeradius is a great piece of software and I will certainly continue 
to use it. I am also very happy with the great documentation that can be found, 
both the wiki and Alan's website are an awesome source of very good 
information. The support community here is also very active, which is a great 
thing.

But had someone with freeradius knowledge taken the time to look at the 
freeradius -X logs I (and David Dumortier) supplied with our questions, they 
would have seen the problem right away I suppose, in both our cases.

Probably there have been too many typical n00b users who asked questions after 
not following the (clear) documentation properly, but please understand we are 
not all like that.

This has caused me an enormous load of stress and has cost me about 3 days (and 
one night sleep), and I assume it has caused you a certain amount of stress as 
well, and it could have been so much more satisfying had it been checked just a 
little bit more.

Of course, you are not responsible for every package being produced and I do 
not know yet how this all works as I did not install our freeradius server 
myself (unfortunately). But in our cases, the users where not to blame, other 
than using an available and hopefully supported package.

I will have a new lenny server installed with just the 2.1.10 debian backport 
package on it (no older versions) to see if that comes with a proper 
radiusd.conf file. If so then my problem is caused by an older package being 
installed earlier and new users will not be bothered by it.

Again, I really think freeradius is a great piece of software, there is plenty 
of good documentation and it has an awesome support community here. So I will 
certainly continue to use freeradius as our authentication server. But please, 
if a user says he followed the instructions to the letter, give them the 
benefit of the doubt and see if something else is going wrong.


> -----Ursprüngliche Nachricht-----
> Von: freeradius-users-bounces+chris.schaatsbergen=aleo-
> [email protected] [mailto:freeradius-users-
> [email protected]] Im
> Auftrag von Alan DeKok
> Gesendet: Montag, 14. Februar 2011 12:57
> An: FreeRadius users mailing list
> Betreff: Re: AW: AW: AW: AW: Authenticating SSH login on a Cisco IOS
> switch to AD
> 
> Schaatsbergen, Chris wrote:
> > That is clear, but it seems it is missing in the Lenny Package
> somehow as http://lists.freeradius.org/pipermail/freeradius-users/2011-
> January/msg00192.html has exactly the same problem as me, no modules
> folder being read causing the ntlm_auth not being recognized as module.
> 
>   <shrug>  I don't run Lenny, so I can't say any more.
> 
> > Where can I find a proper radiusd.conf?
> 
>   Have you tried the 2.1.10 "tar" file on freeradius.org?
> 
>   Alan DeKok.
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to