Re: Authentication against Active Directory page

2006-09-23 Thread Alan DeKok
James J J Hooper <[EMAIL PROTECTED]> wrote: > Does FreeRADIUS taint check (i.e. escape certain characters)? If not, > does the plain text password auth bit of the page have security > considerations? No. It doesn't need to. That's the responsibility of the program being executed. i.e. F

Re: Authentication against Active Directory page

2006-09-23 Thread Alan DeKok
"King, Michael" <[EMAIL PROTECTED]> wrote: > What domain were you testing against? 2000 or 2003? (I ask, because I > was under the impression that KRB5 had to be setup as well) Windows 2000. I'll have to check if I had previously set up Kerberos, and simply missed that in my writeup. Ala

Re: Authentication against Active Directory page

2006-09-23 Thread James J J Hooper
On 23 Sep 2006, at 12:56, Jonathan De Graeve wrote: Does somebody know when machine authentication is supported in samba and if there is a patch for the 3.0.14 (debian stable) version? I think it was 3.0.20b... (search the release notes for 'machine account' if you want to be sure). Don

Re: Authentication against Active Directory page

2006-09-23 Thread James J J Hooper
On 22 Sep 2006, at 20:26, Alan DeKok wrote: http://deployingradius.com/documents/configuration/ active_directory.html It describes a minimal set of steps to take to get authentication working against Active Directory. It works in my limited tests, but if anyone runs into problems, please e

RE: Authentication against Active Directory page

2006-09-23 Thread Jonathan De Graeve
ember 2006 4:47 > Aan: FreeRadius users mailing list > Onderwerp: RE: Authentication against Active Directory page > > Alan, > > What domain were you testing against? 2000 or 2003? (I ask, because I > was under the impression that KRB5 had to be setup as well) > > ---

RE: Authentication against Active Directory page

2006-09-22 Thread King, Michael
Alan, What domain were you testing against? 2000 or 2003? (I ask, because I was under the impression that KRB5 had to be setup as well) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Friday, September 22, 2006 3:26 PM To: FreeRadius