Re: Yet Another AD Question

2006-05-25 Thread Josh
OK. So I think I'm going to go the Samba route. I've got Samba running on the same host as freeradius. I've tested Samba/AD integration by creating a couple shared folders on the Samba server and using Windows AD accounts to mount/map them from windows machines - it works. Now, I need to get

RE: Yet Another AD Question

2006-05-25 Thread Chris Liles
: Re: Yet Another AD Question OK. So I think I'm going to go the Samba route. I've got Samba running on the same host as freeradius. I've tested Samba/AD integration by creating a couple shared folders on the Samba server and using Windows AD accounts to mount/map them from windows machines

Re: Yet Another AD Question

2006-05-24 Thread A . L . M . Buxey
Hi, I've crawled the web for info and tried numerous things to get FreeRadius authenticating users with a 2003 Active Directory. is the system bound into the AD? the error messages suggest that it isnt... alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Yet Another AD Question

2006-05-24 Thread ho
Hi, i've tried a lot, but at the moment we have got a very smart solution to combine the flexibility of freeradius with authentication of central AD: 1) setting up an ms ias server, which is only there for authenticating, i have got only one policy! 2) setting up freeradius to proxy the

Re: Yet Another AD Question

2006-05-24 Thread Alan DeKok
Josh [EMAIL PROTECTED] wrote: rlm_ldap: ldap_search() failed: Operations error See doc/rlm_ldap in the 1.1.2 release, which should be out real soon now. Or, use CVS to checkout -r branch_1_1, and see doc/rlm_ldap. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Yet Another AD Question

2006-05-24 Thread Josh
The only trouble I have with IAS is that most of the users are contained in a seperate AD forest. I have a 2-way trust with another organization. I can authenticate users of the trusted org from my domain over LDAP... however, I can't rely on the trusted domain's Dial In settings for IAS. Which

Re: Yet Another AD Question

2006-05-24 Thread Josh
Yes... I had cut all but the final Bind was successful... here's more of the bind results: rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to org.my.domain.com:389, authentication 0 rlm_ldap: bind as / to