Windows AD Integration

2008-04-07 Thread Lemaster, Rob
Can FreeRADIUS be integrated into Windows Active Directory for user credentials 
and privelige based on Active Directory group? What is the best way to 
integrate FreeRADIUS into Windows Active Directory?
 
Thanks!
 
FreeRADIUS: It's what's for dinner.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Windows AD Integration

2008-04-07 Thread Phil Mayers

Lemaster, Rob wrote:

Can FreeRADIUS be integrated into Windows Active Directory for user


Yes. A google search for freeradius active directory shows many results.


credentials and privelige based on Active Directory group? What is
the best way to integrate FreeRADIUS into Windows Active Directory?


For authentication, you will probably want to:

 * install samba
 * join the domain
 * use the ntlm_auth helper binary in the mschap module 
configuration - see the sample config file for examples of use


For group authentication, you will probably want to use LDAP against 
your AD controller. You will need a user (service) account for 
FreeRadius to search the LDAP directory with, and there are some caveats 
with ADs LDAP implementation. See the default config files for details.




Thanks!

FreeRADIUS: It's what's for dinner.

- List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html