Re: documentation and project organization (Was: Using LDAP with EAP-TLS)

2011-05-17 Thread Alan DeKok
Gary Gatten wrote: Good point about configuring multiple things at once - but that is a recipe - right? Several ingredients that make a tasty cake? Yes. It should be done as a recipe with multiple steps. See http://deployingradius.com for examples. I think it would be a pretty common

Re: documentation and project organization (Was: Using LDAP with EAP-TLS)

2011-05-17 Thread Phil Mayers
On 16/05/11 20:26, Alan DeKok wrote: My $0.02 is that we should use github. They now support git-backed Wikis, which use markdown. It's close enough, and has a lot of benefits. I quite like Markdown. We have some internal introduction to radius and introduction to FreeRADIUS documents.

documentation and project organization (Was: Using LDAP with EAP-TLS)

2011-05-16 Thread John Dennis
On 05/16/2011 10:13 AM, Alexandros Gougousoudis wrote: Phil, I also understand a lot of things and I can read, but the documentation of FR is not ideal. I've googled around, looked examples and had more questions than before. Where are all these features documented, like the if then-things in

Re: documentation and project organization (Was: Using LDAP with EAP-TLS)

2011-05-16 Thread John Center
Hi John, Just to chime in, I find all of the comments in radiusd.conf, etc. distracting overwhelming. I strip out the comments from the files I'm using - usually to find out how simple the configuration really is. When I'm missing something, I refer back to the original files look up the

Re: documentation and project organization (Was: Using LDAP with EAP-TLS)

2011-05-16 Thread Arran Cudbard-Bell
John, I believe Alan started a project to try and improve documentation in May last year. A few documents were converted RST format, but I don't think it was ever completed. I'm going to suggest the same thing I did back then. Add RST support to the Wiki, setup a well defined documentation

Re: documentation and project organization (Was: Using LDAP with EAP-TLS)

2011-05-16 Thread John Dennis
On 05/16/2011 02:20 PM, Arran Cudbard-Bell wrote: John, I believe Alan started a project to try and improve documentation in May last year. A few documents were converted RST format, but I don't think it was ever completed. I'm going to suggest the same thing I did back then. Add RST support

RE: documentation and project organization (Was: Using LDAP with EAP-TLS)

2011-05-16 Thread Gary Gatten
If I knew more about it I would take my time to write some ... examples, use cases, case studies, whatever. But, I can barely get by - each time I think I understand something it turns out I really don't. I don't want to spread bad info so I say nothing - usually :) IMHO a good starting

Re: documentation and project organization (Was: Using LDAP with EAP-TLS)

2011-05-16 Thread Alan DeKok
Arran Cudbard-Bell wrote: I believe Alan started a project to try and improve documentation in May last year. A few documents were converted RST format, but I don't think it was ever completed. I received a number of patches from one person, a few from another one or two, and nothing else.

Re: documentation and project organization (Was: Using LDAP with EAP-TLS)

2011-05-16 Thread Alan DeKok
John Dennis wrote: Sounds like a fine plan to me. I do recall the documentation effort from last year. But the various promises of documentation seem to wither on the vine, the effort you cite is a perfect example. Maybe Alan's book is the answer, but that's been promised for a long time too.

Re: documentation and project organization (Was: Using LDAP with EAP-TLS)

2011-05-16 Thread Alan DeKok
Gary Gatten wrote: I will step up to the plate and offer up a standard format for a Recipe. I will pick an easy deployment scenario - such as: How do I configure FR to authenticate VTY access to my Cisco gear using AD on the backend, and users must be a member of GroupX That's

Re: documentation and project organization (Was: Using LDAP with EAP-TLS)

2011-05-16 Thread Alan DeKok
John Center wrote: Just to chime in, I find all of the comments in radiusd.conf, etc. distracting overwhelming. I strip out the comments from the files I'm using - usually to find out how simple the configuration really is. When I'm missing something, I refer back to the original files look

Re: documentation and project organization (Was: Using LDAP with EAP-TLS)

2011-05-16 Thread Alan DeKok
John Dennis wrote: But all these positive attributes are sometimes negated by the difficulty of understanding the system. Many justifiably feel configuring FreeRADIUS is a black art. It's often been pointed out that config files, doc directory and the wiki contains all you need to know. There

RE: documentation and project organization (Was: Using LDAP with EAP-TLS)

2011-05-16 Thread Gary Gatten
Good point about configuring multiple things at once - but that is a recipe - right? Several ingredients that make a tasty cake? I think it would be a pretty common deployment scenario: lots of people have Cisco and AD, and want to auth their Cisco admins / VTY access against AD. We used this

Re: documentation and project organization (Was: Using LDAP with EAP-TLS)

2011-05-16 Thread John Dennis
On 05/16/2011 03:41 PM, Alan DeKok wrote: organization / people / roles: code: Alan mgmt: Alan docs: Alan web site: Alan releases: Alan bug fixes: Alan Wiki: Peter Nixon Sense a theme? I do see a theme but I also see a problem.

Re: documentation and project organization (Was: Using LDAP with EAP-TLS)

2011-05-16 Thread Alan DeKok
John Dennis wrote: I do see a theme but I also see a problem. FreeRADIUS has gotten big enough that 1 person, even one as amazing as you are, can't do it all. I humbly suggest you try to offload some of the work by running this as a project and having a team. Sure. Volunteers? It was