"The windows supplicant tries PEAP by default iirc. PEAP is not compatible
with kerberos."
==> We do not use windows in our office for regular users anyway so it's
fine on this side.
" radius server is not configured to authorize 802.1x using kerberos
anyway."
==> That is exactly the problem. I see now that setting sources will not
help.
When I wanted to configure radius to use kerberos, I find there is not krb5
module embeded in the freeradius of packetfence, i.e. there is not
/usr/local/pf/radbb/modules/krb5 file. But apt-get install freeradius-krb5
says it is already installed.
When i try to set up
Auth-Type Kerberos {
krb5
}
in the radius conf, it says there is no module named krb5 :/
Where is the krb5 module ?!
Thanks again,
Nicolas GAILLY
2015-06-10 18:41 GMT+02:00 Louis Munro <[email protected]>:
>
>
> On Jun 10, 2015, at 11:13 , Nicolas Gailly <[email protected]> wrote:
>
>
> It doesn't seem to take into account kerberos authentication at all.
> What did I miss ?
>
>
> Two things come to mind:
>
>
> - The windows supplicant tries PEAP by default iirc. PEAP is not
> compatible with kerberos.
> - The radius server is not configured to authorize 802.1x using
> kerberos anyway.
>
>
>
> The PacketFence sources are meant as authorization sources (mostly).
> 802.1x authentication has to succeed first (or you should use MAC
> authentication).
> Getting 802.1x working in your case would require a kerberos compatible
> supplicant and configuring FreeRADIUS for it.
>
>
> Regards,
> --
> Louis Munro
> [email protected] :: www.inverse.ca
> +1.514.447.4918 x125 :: +1 (866) 353-6153 x125
> Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (
> www.packetfence.org)
>
>
> ------------------------------------------------------------------------------
>
> _______________________________________________
> PacketFence-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
--
Nicolas Gailly
------------------------------------------------------------------------------
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
