FreeRadius and MacOsx (LDAP vs Kerberos)

2011-07-26 Thread Massimiliano Tommasi
Hello guys, I spent many days testing and working with free-radius and LDAP. I got my app, was working authenticating on my LDAP thru FreeRadius, i seed to be what I was looking for... BUT I tested everything with OpenLDAP on Linux but my "real world", in this case, is OpenLDAP on MAC OSX Server (o

Re: FreeRadius and MacOsx (LDAP vs Kerberos)

2011-07-26 Thread Alan DeKok
Massimiliano Tommasi wrote: > I tested everything with OpenLDAP on Linux but my "real world", in this > case, is OpenLDAP on MAC OSX Server (open-directory) an it seems to be > pretty different. See rlm_opendirectory. It's written by Apple, so I suspect it should work. :) Just list "opendire

Re: FreeRadius and MacOsx (LDAP vs Kerberos)

2011-07-26 Thread Massimiliano Tommasi
You are pretty right ;) I have just recompiled freeradius with that module, which I need... It seems to be what I need but ... I notice a lack of documentation for that module.. I have found nothing at all :( Could you suggest me some doc or/and example of the conf, please? Max Il 26/07/11 22.40,

Re: FreeRadius and MacOsx (LDAP vs Kerberos)

2011-07-27 Thread Alan DeKok
Massimiliano Tommasi wrote: > You are pretty right ;) > I have just recompiled freeradius with that module, which I need... > It seems to be what I need but ... I notice a lack of documentation for > that module.. > I have found nothing at all :( > Could you suggest me some doc or/and example of th

Re: FreeRadius and MacOsx (LDAP vs Kerberos)

2011-07-27 Thread Massimiliano Tommasi
That's working, Alan. Thanks. Max Il 27/07/11 14.54, Alan DeKok ha scritto: > Massimiliano Tommasi wrote: >> You are pretty right ;) >> I have just recompiled freeradius with that module, which I need... >> It seems to be what I need but ... I notice a lack of documentation for >> that module.. >

Re: FreeRadius and MacOsx (LDAP vs Kerberos)

2011-07-27 Thread Massimiliano Tommasi
I got the first step..., FreeRadius and OpenDirectory are "speaking" the same language BUT I'm not able to authenticate the users... On the client side I have a function to get the chap and on the server side I don't save the password in hashing manner (i guess) ... When I try to auth, this is th

Re: FreeRadius and MacOsx (LDAP vs Kerberos)

2011-07-27 Thread Alan DeKok
Massimiliano Tommasi wrote: > I got the first step..., FreeRadius and OpenDirectory are "speaking" the > same language BUT I'm not able to authenticate the users... Please READ the debug output. Honestly, it's not that hard. > On the client side I have a function to get the chap and on the serv

Re: FreeRadius and MacOsx (LDAP vs Kerberos)

2011-07-27 Thread Massimiliano Tommasi
You are right, Alan. I hoped there was a solution to this but evidently it's not possible. The only way is to disable the chap on the client-side. Regards, Max Il 27/07/11 17.14, Alan DeKok ha scritto: > Massimiliano Tommasi wrote: >> I got the first step..., FreeRadius and OpenDirectory are "sp