Re: wireless+freeradius+AD

2005-11-22 Thread Alan DeKok
Robin Mordasiewicz [EMAIL PROTECTED] wrote: I made a trip to my local bookstore and just read in the oreilly 802.11 book on building wireless infrastructure that I would need to use Microsoft IAS. Is this false ? Yes. I think, though, at the time the book was written, machine

RE: wireless+freeradius+AD

2005-11-21 Thread King, Michael
Oh, excellent. I just joined this list hoping to query the members on finding more information on doing wireless+activedirectory+freeradius, unfortunately I could not find any good postings, or web toots/examples. Hi Robin, Welcome to the club. I would need to use Microsoft IAS. Is

RE: wireless+freeradius+AD

2005-11-21 Thread Robin Mordasiewicz
On Mon, 21 Nov 2005, King, Michael wrote: Oh, excellent. I just joined this list hoping to query the members on finding more information on doing wireless+activedirectory+freeradius, unfortunately I could not find any good postings, or web toots/examples. Hi Robin, Welcome to the

RE: wireless+freeradius+AD

2005-11-21 Thread David Antognini
Yes I too would like some help with this. This what I am trying to do: 1. authenticate via chap (from chillispot) to freeradius, using unix shadow passwords or pam.. I followed the pam directions and it works fine for pap, but not chap.. 2. also, would like to get it to work via AD (kerberos

Re: wireless+freeradius+AD

2005-11-20 Thread Alan DeKok
Laker Netman [EMAIL PROTECTED] wrote: Not sure I understand. To my knowledge, currently our AD doesn't contain any info that would differentiate a wireless user from one who is wired. Based on the authenticating NAS (which is identifiable as wired vs wireless at least to RADIUS) how could I

Re: wireless+freeradius+AD

2005-11-20 Thread Robin Mordasiewicz
On Sun, 20 Nov 2005, Alan DeKok wrote: Laker Netman [EMAIL PROTECTED] wrote: You're completely down the wrong path. AD is a database. It's a directory. Using anonymous bind, there is very little data you can get from it. Stop talking about solutions, as you don't know how the

Re: wireless+freeradius+AD

2005-11-20 Thread Lewis Bergman
Alan DeKok wrote: You choose which group you fall into. I don't have time to care what you think about me. I remember when I was very new to Linux. I had made an incredibly stupid basic networking mistake and was trying to find out why a specific Linux ethernet driver was acting up. The

Re: wireless+freeradius+AD

2005-11-19 Thread Alan DeKok
Laker Netman [EMAIL PROTECTED] wrote: First: We do not allow anonymous binding to our AD LDAP. So, for testing to date, I have used Administrator and the associated password in the config file. Obviously this is less than ideal :) What is the best or better alternative? Allowing anonymous

Re: wireless+freeradius+AD

2005-11-19 Thread Laker Netman
Comments below. --- Alan DeKok [EMAIL PROTECTED] wrote: Laker Netman [EMAIL PROTECTED] wrote: First: We do not allow anonymous binding to our AD LDAP. So, for testing to date, I have used Administrator and the associated password in the config file. Obviously this is less than ideal :)

Re: wireless+freeradius+AD

2005-11-18 Thread Brian A. Seklecki
If I want to use WPA with TKIP (or preferably AES) do I *have* to have a supplicant? Most hosts will be XP, WPA uses TKIP WPA2 uses AES Both use 802.1x/EAP with whatever cocktail of options you convolute. though there is a slim chance I may have to deal with others. Lastly, as I