RE: AD Authentication Permissions

2013-01-10 Thread Tyler Brady
On Wed 1/9/2013 4:31 PM, John Dennis wrote: > I think my bind is working fine now, but my basedn = "o=My Org,c=UA" field > is still wrong. I'm still not sure of the syntax. Any suggestions? I don't see a basedn of "o=My Org,c=UA" anywhere, however I do see a basedn of "ou=Phoenix_Users,dc=comp

Re: AD Authentication Permissions

2013-01-09 Thread John Dennis
On 01/09/2013 05:10 PM, Tyler Brady wrote: I think my bind is working fine now, but my basedn = "o=My Org,c=UA" field is still wrong. I'm still not sure of the syntax. Any suggestions? I don't see a basedn of "o=My Org,c=UA" anywhere, however I do see a basedn of "ou=Phoenix_Users,dc=company

RE: AD Authentication Permissions

2013-01-09 Thread Tyler Brady
ers-bounces+tbrady=stc-comm@lists.freeradius.org] On Behalf Of Mathieu Simon Sent: Wednesday, January 09, 2013 12:53 PM To: FreeRadius users mailing list Subject: Re: AD Authentication Permissions Hi Tyler Since I'm in a similar situation with AD but still learning, just general experie

Re: AD Authentication Permissions

2013-01-09 Thread Mathieu Simon
Hi Tyler Since I'm in a similar situation with AD but still learning, just general experience with other Applications from the *nix world authenticating against AD: 2013/1/9 John Dennis : > On 01/09/2013 02:00 PM, Tyler Brady wrote: >> >> Can someone give more details on setting up LDAP groups? S

Re: AD Authentication Permissions

2013-01-09 Thread John Dennis
On 01/09/2013 02:00 PM, Tyler Brady wrote: Can someone give more details on setting up LDAP groups? So far I have attempted to modify the users file and the ldap module. I can't seem to get the ldap module configured properly, but I'm sure that's just one of many issues. ldap { #

RE: AD Authentication Permissions

2013-01-09 Thread Tyler Brady
Can someone give more details on setting up LDAP groups? So far I have attempted to modify the users file and the ldap module. I can't seem to get the ldap module configured properly, but I'm sure that's just one of many issues. ldap { # # Note that this needs to match the name

Re: AD Authentication Permissions

2013-01-05 Thread Mathieu Simon
G'day Alan(s) 2013/1/5 : > huh? this wasnt about authentication, it was about authorization - ie > passing back details about what a user can do on some kit - that works fine > 100% fine with LDAP and AD Thank you both for pointing in the correct directions by pointing me back at authenticatio

Re: AD Authentication Permissions

2013-01-05 Thread Alan DeKok
Mathieu Simon wrote: > As short question since Tyler was asking for AD as backend - which I > have read (so far) > can't use the LDAP module since AD stores ntlm hashes - at least not > for authentication. You can't use AD as an LDAP module for *authentication*. > But then for LDAP groups how i

Re: AD Authentication Permissions

2013-01-05 Thread A . L . M . Buxey
Hi, > (protest if this may sound like hijacking this thread...) > As short question since Tyler was asking for AD as backend - which I > have read (so far) > can't use the LDAP module since AD stores ntlm hashes - at least not > for authentication. huh? this wasnt about authentication, it was abo

Re: AD Authentication Permissions

2013-01-05 Thread Mathieu Simon
G'day all 2013/1/5 Alan DeKok : [snip] > > Set up groups in LDAP. See the LDAP / AD documentation. > > Then, in FreeRADIUS, check them: > > #-- users file > DEFAULT LDAP-Group == "foo", ... > ... > > #--- (protest if this may sound like hijacking this thread...) As short question sin

Re: AD Authentication Permissions

2013-01-04 Thread Alan DeKok
Tyler Brady wrote: > I am setting up a freeRADIUS (2.1.10) server for my network. I have > everything working how I want it to except for some of the permission > settings. For example, when users log in to Motorola radios in my > network via freeRADIUS they only receive read-only permissions. Or w