Re: [Samba] SAMBA and FreeRadius

2003-12-03 Thread Chew, Darren 
Hi Bob,

Yes. FreeRadius can be configured to use PAM for authentication. PAM can 
be configured to use pam_winbind which in turn uses Samba. This is 
possible.

Regards,

Darren

On Wed, 3 Dec 2003 [EMAIL PROTECTED] wrote:

 I need to use CHAP on my NAS. Is it possible to authenticate FreeRadius 
 against SAMBA 3.x?
 
 Thanks in advance for any help!
 
 Bob
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] SAMBA and FreeRadius

2003-12-03 Thread Tom Ryan 
As freeradius supports PAM for authentication, this is trivial.

Simply configure freeradius to use pam (see config files for freeradius) 
and then set your pam config for radius to use smb (via winbind) for 
authentication.

Tom

On Wed, 3 Dec 2003 [EMAIL PROTECTED] wrote:

 I need to use CHAP on my NAS. Is it possible to authenticate FreeRadius 
 against SAMBA 3.x?
 
 Thanks in advance for any help!
 
 Bob
 

-- 
___
Tom RyanVoice: 856-225-6361
Consulting System Administrator   Fax: 856-969-7900
Rutgers School of Law - Camden

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] SAMBA and FreeRadius

2003-12-03 Thread Andrew Bartlett 
On Wed, Dec 03, 2003 at 06:19:23PM -0500, Tom Ryan wrote:
 As freeradius supports PAM for authentication, this is trivial.
 
 Simply configure freeradius to use pam (see config files for freeradius) 
 and then set your pam config for radius to use smb (via winbind) for 
 authentication.
 
 Tom
 
 On Wed, 3 Dec 2003 [EMAIL PROTECTED] wrote:
 
  I need to use CHAP on my NAS. Is it possible to authenticate FreeRadius 
  against SAMBA 3.x?
  
  Thanks in advance for any help!
  

But that would not be CHAP.  I have written a tool called ntlm_auth to
allow arbitary external programs to use NTLM authentication.

FreeRadius just needs to be told how to use it.  I have told pppd how
to use ntlm_auth, see my paper at
http://hawkerc.net/staff/abartlet/comp3700 for the patch (which should serve as a good 
example).

Andrew Bartlett
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba