Re: Multiple AD's and domains?

2009-07-27 Thread Luis Azevedo
On Jul 22, 2009, at 02:22 , Alan DeKok wrote: However... they all need to be part of the same AD forest / whatever. You CANNOT authenticate to two completely independent AD systems. This is a fundamental limitation of AD. Hi, Well, they don't need to be part of the same forest if you cr

Re: Multiple AD's and domains?

2009-07-22 Thread Justin Steward
On Wed, Jul 22, 2009 at 10:15 PM, Alan DeKok wrote: > Justin Steward wrote: > > And with regard to my other question, can I just use plain ol' LDAP to > > authenticate? A successful LDAP Bind is all I need for our purposes. > > That will work for PAP. > > Ok, thanks for confirmation. Kind Rega

Re: Multiple AD's and domains?

2009-07-22 Thread Alan DeKok
Justin Steward wrote: > And with regard to my other question, can I just use plain ol' LDAP to > authenticate? A successful LDAP Bind is all I need for our purposes. That will work for PAP. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Multiple AD's and domains?

2009-07-21 Thread Justin Steward
On Wed, Jul 22, 2009 at 11:22 AM, Alan DeKok wrote: > However... they all need to be part of the same AD forest / whatever. > You CANNOT authenticate to two completely independent AD systems. This > is a fundamental limitation of AD. > > That's more or less what I was expecting. That is what I

Re: Multiple AD's and domains?

2009-07-21 Thread Alan DeKok
Justin Steward wrote: > Now, the stock standard way of authenticating against AD is using samba, > joining the domain, and using NTLM Auth. Since I have multiple AD > domains, how would this best be handled? > > I know that PHP is capable of using LDAP to authenticate against an AD > server. Can f

Multiple AD's and domains?

2009-07-21 Thread Justin Steward
Hi Guys, I have an upcoming project where the setup is going to be something along the following: Client logs in using their username/password for domain FreeRadius authenticates the user against the AD server for that domain There will be clients using the service from MULTIPLE different AD doma