On Jun 12, 2015, at 5:14 , Nicolas Gailly <[email protected]> wrote:
> "The windows supplicant tries PEAP by default iirc. PEAP is not compatible
> with kerberos."
> ==> We do not use windows in our office for regular users anyway so it's fine
> on this side.
>
> " radius server is not configured to authorize 802.1x using kerberos anyway."
> ==> That is exactly the problem. I see now that setting sources will not help.
> When I wanted to configure radius to use kerberos, I find there is not krb5
> module embeded in the freeradius of packetfence, i.e. there is not
> /usr/local/pf/radbb/modules/krb5 file. But apt-get install freeradius-krb5
> says it is already installed.
> When i try to set up
> Auth-Type Kerberos {
> krb5
> }
>
> in the radius conf, it says there is no module named krb5 :/
> Where is the krb5 module ?!
Make real sure you have to module installed, as in :
# rpm -qa | grep radius
freeradius-utils-2.2.5-3.centos6.x86_64
freeradius-perl-2.2.5-3.centos6.x86_64
packetfence-freeradius2-3.4.1-1.el6.noarch
freeradius-krb5-2.2.5-3.centos6.x86_64
freeradius-mysql-2.2.5-3.centos6.x86_64
freeradius-2.2.5-3.centos6.x86_64
freeradius-debuginfo-2.2.0-2.el6.x86_64
freeradius-ldap-2.2.5-3.centos6.x86_64
You may have to install it from the PacketFence repository as it is not
automatically installed.
Then run radius with -X and post the output:
# radiusd -d /usr/local/pf/raddb -X
Regards,
--
Louis Munro
[email protected] :: www.inverse.ca
+1.514.447.4918 x125 :: +1 (866) 353-6153 x125
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence
(www.packetfence.org)------------------------------------------------------------------------------
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
