RE: Using freeradius to authenticate users to a Windows 2000 AD

[Steve OBrien]

Here is part of my config, I can't send it all because the listserver keeps bouncing it back...

[snip]

ldap {
                server = "192.168.2.247"
                identity = "CN=freeradius,CN=Users,DC=testdc,DC=win2K3,DC=bend"
                password = freerad1us
                basedn = "DC=testdc,dc=win2K3,dc=bend"
                filter = "(&(SamAccountName=%{Stripped-User-Name:-%{User-Name}})(memberOf=CN=RemoteUser,CN=Users,DC=testdc,DC=win
2K3,DC=bend))"
                #filter = (SamAccountName=%u)
                #access_attr = "dialupAccess"
                # Mapping of RADIUS dictionary attributes to LDAP
                # directory attributes.
                dictionary_mapping = ${raddbdir}/ldap.attrmap
                ldap_debug = 0x0028
                start_tls = no
                password_attribute = userPassword
                timeout = 4
                timelimit = 3
                net_timeout = 1
                compare_check_items = yes
        }
[snip]

        # Uncomment it if you want to use ldap for authentication
        Auth-Type LDAP {
                ldap
        }


        #
        #  Allow EAP authentication.
[snip]