Re: [RADIATOR] ADSI auth from Linux

[Heikki Vatiainen]

On 25.07.2017 19:20, Eric W. Bates wrote:


Am I correct in understanding that Win32::OLE is only available to perl
installs on Windows?


Yes, that's correct.


How do I authenticate to Active Directory from Linux?


In addition to AuthBy LDAP2, as suggested by Alexander, AuthBy NTLM is 
often used with Linux. With AuthBy LDAP2 you can authenticate only plain 
text password authentication (PAP), but it allows you to search the 
directory as the part of the authentication process.


AuthBy NTLM supports MSCHAPv2, so you can do PEAP/EAP-MSCHAPv2 with it, 
in addition to PAP. However, if you need to do directory lookups, you'd 
need to do separate search with AuthBy LDAP2.


AuthBy NTLM requires that Samba's winbindd is up and running before it 
works. AuthBy NTLM uses ntlm_auth that comes with Samba. Once ntlm_auth 
and winbindd that ntlm_auth uses both work, then AuthBy NTLM should work 
too.


AuthBy LDAP2 requires just LDAPS connection, so it's often easier to set up.

Thanks,
Heikki

--
Heikki Vatiainen 
___
radiator mailing list
radiator@lists.open.com.au
http://lists.open.com.au/mailman/listinfo/radiator

Re: [RADIATOR] ADSI auth from Linux

[Hartmaier Alexander]

AuthBy::LDAP2 talking to the Active Directory domain controllers using LDAPS.

Best regards, Alex

On 2017-07-25 18:20, Eric W. Bates wrote:

I'm running radiator 4.19 from Debian using AuthBy ADSI and the daemon
refuses to start because Win32::OLE is missing.

Am I correct in understanding that Win32::OLE is only available to perl
installs on Windows?

How do I authenticate to Active Directory from Linux?





___
radiator mailing list
radiator@lists.open.com.au
http://lists.open.com.au/mailman/listinfo/radiator



*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*
T-Systems Austria GesmbH Rennweg 97-99, 1030 Wien
Handelsgericht Wien, FN 79340b
*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*
Notice: This e-mail contains information that is confidential and may be 
privileged.
If you are not the intended recipient, please notify the sender and then
delete this e-mail immediately.
*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*
___
radiator mailing list
radiator@lists.open.com.au
http://lists.open.com.au/mailman/listinfo/radiator