Re: Freeradius + Microsoft Active Directory

Natalia Escalera [EMAIL PROTECTED] wrote: Thank you for the fast response. The password is clear-text. We are using ethereal to debug why we are getting Operations Error on the Search Result. See the list archives. You have to qualify the LDAP search.

Re: Freeradius + Microsoft Active Directory

Hello, What do you mean with qualify the LDAP search? Thanks. Nataly On 2/25/06, Alan DeKok [EMAIL PROTECTED] wrote: Natalia Escalera [EMAIL PROTECTED] wrote: Thank you for the fast response. The password is clear-text. We are using ethereal to debug why we are getting Operations Error

Re: Freeradius + Microsoft Active Directory

Hello, How can we specify the bindn on radius.conf so we do not search as an anonymous user? Thank you, Nataly On 2/25/06, Natalia Escalera [EMAIL PROTECTED] wrote: Hello, What do you mean with qualify the LDAP search? Thanks. Nataly On 2/25/06, Alan DeKok [EMAIL PROTECTED] wrote:

Re: Freeradius + Microsoft Active Directory

I mean binddn... On 2/25/06, Natalia Escalera [EMAIL PROTECTED] wrote: Hello, How can we specify the bindn on radius.conf so we do not search as an anonymous user? Thank you, Nataly On 2/25/06, Natalia Escalera [EMAIL PROTECTED] wrote: Hello, What do you mean with qualify the LDAP

Re: Freeradius + Microsoft Active Directory

I have another question, how can we avoid referrals coming from AD Ldap server? How can we specify those settings? Thanks, Nataly On 2/25/06, Natalia Escalera [EMAIL PROTECTED] wrote: I mean binddn... On 2/25/06, Natalia Escalera [EMAIL PROTECTED] wrote: Hello, How can we specify the

Freeradius - LDAP - Active Directory

hi at all my system: Debian Sarge 3.1 Kernel 2.6.8 i installed the following software with apt-get apache-ssl 1.3.34-1 php4 php4-mysql mysql 4.1.14 openssl 0.9.8a-3 openldap stable 2.3.11 2005-10-18 [compiled] freeradius 1.0.5-2 freeradius-ldap 1.0.5-2 freeradius-mysql 1.0.5-2 freeradius-krb5

Re: Freeradius - LDAP - Active Directory

hi i found the problem... *before* basedn = dc=my,dc=dom # groupname_attribute = cn # groupmembership_filter = (|((objectClass=GroupOfNames)(member=%{Ldap-UserDn}))((objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn}))) # groupmembership_attribute = radiusGroupName timeout = 4

MSCHAP, FreeRADIUS and Active Directory

Hello, My issue is that I try to authenticate users against AD with MSCHAP (PEAP and MSCHAP v2 in the future). I can authenticate from the command line with ntml_auth : ntml_auth --username=toto --domain=krb.com = NT_STATUS_OK When I try to test the config with radtest, I get few lines that I

Re: MSCHAP, FreeRADIUS and Active Directory

DELORT Stephane [EMAIL PROTECTED] wrote: Then, it seems that a MS-CHAP-Challenge is missing. I reaaly don't know how to give a challenge to radtest nor which string to choose (a random one?). radtest doesn't support sending MS-CHAP attributes, unless you create them by hand. rlm_mschap:

Freeradius and Active Directory Question

What is the best way to authenticate users against Active Directory via Freeradius? Is it with ntlm_auth or LDAP? My scenario is to authenicate our VPN users (using Cisco VPN clients and VPN concentrators) to authenticate against AD via radius. Somebody mentioned that if MSCHAP is not used

Re: Freeradius and Active Directory Question

rlm_exec, however that's a horrible kludge when you can just use LDAP. --Mike Graham, Robert wrote: What is the best way to authenticate users against Active Directory via Freeradius? Is it with ntlm_auth or LDAP? My scenario is to authenicate our VPN users (using Cisco VPN clients and VPN

RE: FreeRADIUS and Active Directory

, 2005 8:12 PM To: freeradius-users@lists.freeradius.org Subject: Re: FreeRADIUS and Active Directory Hey, Michael, I'm betting your ntlm_auth command, where it uses the username, looks like this: --username=%{Stripped-User-Name:-%{User-Name:-None}} This is the default. Try changing your

RE: FreeRADIUS and Active Directory

5 more minutes of testing, I tired ntlm_auth --request-nt-key --username=%{mschap:User-Name} --challenge=%{mschap:Challenge} --nt-response=%{mschap:NT-Response} On a whim, and it worked (removed domain from ntlm_auth) Sorry for the excess question. - List info/subscribe/unsubscribe? See

FreeRADIUS and Active Directory

with active directory? Sorry, about my english, but I hope anybody can understand my problem. I would be very grateful if anybody can help me to solve this problem, because I have spent so much time for this project and I can not give it up. Best regards Peter - List info/subscribe

RE: FreeRADIUS and Active Directory

Subject: FreeRADIUS and Active Directory Hello all, I'd like to run a Wireless LAN with a Windows XP SP2 Client, a FreeRADIUS 1.0.2 Server and a Windows 2003 Server with Active Directory. For the authentication PEAP and MS-CHAPv2 is used. This scenario works quite well when I am logged on as the local

Re: FreeRADIUS and Active Directory

, for authentification. But I think this should be correct, because windows should attempt to use the machine account, if the user credientials are unavailable. So, why doesn't work the authentication with machine accounts? Does anybody have the same problems get freeradius working with active

RE: FreeRADIUS and Active Directory

@lists.freeradius.org Subject: FreeRADIUS and Active Directory Hello all, I'd like to run a Wireless LAN with a Windows XP SP2 Client, a FreeRADIUS 1.0.2 Server and a Windows 2003 Server with Active Directory. For the authentication PEAP and MS-CHAPv2 is used. This scenario works quite well

Re: FreeRADIUS and Active Directory

anybody have the same problems get freeradius working with active directory? Sorry, about my english, but I hope anybody can understand my problem. I would be very grateful if anybody can help me to solve this problem, because I have spent so much time for this project and I can not give

RE: FreeRADIUS and Active Directory

Is there a How-to on using FreeRADIUS / PEAP / Active Directory I've been trying to hobble along with http://www.dslreports.com/forum/remark,9286052~mode=flat But it wasn't for this specific instace. I'm dying right now on this snip modcall: entering group authenticate for request 1

Re: FreeRADIUS and Active Directory

King, Michael [EMAIL PROTECTED] wrote: /usr/local/sbin/radiusd: relocation error: /usr/local/lib/rlm_eap_peap-1.0.2.so: undefined symbol: eaptls_process Yuck. You're running an unfriendly OS. The simplest way to fix this is to re-build re-install the server via: $ ./configure

RE: FreeRADIUS and Active Directory

and Active Directory King, Michael [EMAIL PROTECTED] wrote: /usr/local/sbin/radiusd: relocation error: /usr/local/lib/rlm_eap_peap-1.0.2.so: undefined symbol: eaptls_process Yuck. You're running an unfriendly OS. The simplest way to fix this is to re-build re-install the server via

RE: FreeRADIUS and Active Directory

The --disable-shared fixed that problem, and I replaced all the certificates and I was successfully able to logon via TLS, and low and behold. PEAP works now too. Thanks. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: FreeRADIUS and Active Directory

Ok, scratch half of my last message. I left it configured for TLS. PEAP isn't working for me. I'm getting this failure: Processing the authenticate section of radiusd.conf modcall: entering group Auth-Type for request 14 rlm_mschap: No User-Password configured. Cannot create LM-Password.

Re: FreeRADIUS and Active Directory

Hey, Michael, I'm betting your ntlm_auth command, where it uses the username, looks like this: --username=%{Stripped-User-Name:-%{User-Name:-None}} This is the default. Try changing your ntlm_auth line in your radiusd.conf to something like this: ntlm_auth --request-nt-key

Re: Freeradius and Active Directory

Hi, Active Directory works with freeradius through, but if you want to use it within a 802.1x/EAP environment it won't work. Because you have to get out of Active Directory the NT Passwords. Active Directory doesn't support this, so far I came to know. Is there any solution to this. Thanks

Re: Freeradius and Active Directory

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cool Man wrote: | Hi, | | | Active Directory works with freeradius through, but if | you want to use it within a 802.1x/EAP environment it | won't work. Because you have to get out of Active | Directory the NT Passwords. Active Directory doesn't

Re: Freeradius and Active Directory

For using PEAP with FreeRADIUS and Active Directory, you'll need to use the ntlm_auth functionality in the mschap module. --Mike On Thu, 2004-10-21 at 06:36, Cool Man wrote: Hi, Active Directory works with freeradius through, but if you want to use it within a 802.1x/EAP environment

Re: Freeradius and Active Directory

to handle group lookups and such or is it just authentication? Bill Michael Griego wrote: | For using PEAP with FreeRADIUS and Active Directory, you'll need to use | the ntlm_auth functionality in the mschap module. | | --Mike | | | On Thu, 2004-10-21 at 06:36, Cool Man wrote: | |Hi, | | |Active

Re: Freeradius and Active Directory

SIGNED MESSAGE- Hash: SHA1 Cool Man wrote: | Hi, | | | Active Directory works with freeradius through, but if | you want to use it within a 802.1x/EAP environment it | won't work. Because you have to get out of Active | Directory the NT Passwords. Active Directory doesn't | support

Re: Freeradius and Active Directory

Cool Man [EMAIL PROTECTED] wrote: My problem is I am proxying user of a specfic domain to another radius server which is infact an Active directory. Active Directory is not a RADIUS server. Could you say which RADIUS server you're actually using? Now the EAP packets proxied to AD are

Re: Freeradius and Active Directory

On Thu, 21 Oct 2004, Alan DeKok wrote: Additionally how the authentication request is forwarded to AD. FreeRADIUS can do authentication to a Windows domain via ntlm_auth. It's not quite the same thing, but it's close. Another, possibly simpler, solution is to install IAS on the Windows

Freeradius and Active Directory

Hi , I would like to know if freeradius works with Active directory. If so how can I configure it. secondly, I want to use Active Directory within for 802.1x/EAP authentication. Is there any possibility to establish this tak. Thanks, Raza

Instructions for using Freeradius with Active-Directory

After I posted yesterday that I had Free Radius authenticating to AD successfully but I was interested in finding out how to do the authentication via group membership I recieved a number of requests for information on how I set up the basic Ldap authentication against Active-Drectory. Let me

<    1   2