Robin Mordasiewicz <[EMAIL PROTECTED]> wrote:
> I made a trip to my local bookstore and just read in the oreilly 802.11
> book on building wireless infrastructure that I would need to use
> Microsoft IAS. Is this false ?
Yes.
I think, though, at the time the book was written, machine
authenti
Yes I too would like some help with this.
This what I am trying to do:
1. authenticate via chap (from chillispot) to freeradius, using unix shadow
passwords or pam..
I followed the pam directions and it works fine for pap, but not chap..
2. also, would like to get it to work via AD (kerberos et
On Mon, 21 Nov 2005, King, Michael wrote:
> > Oh, excellent. I just joined this list hoping to query the
> > members on finding more information on doing
> > wireless+activedirectory+freeradius,
> > unfortunately I could not find any good postings, or web
> > toots/examples.
>
> Hi Robin, Welcome
> Oh, excellent. I just joined this list hoping to query the
> members on finding more information on doing
> wireless+activedirectory+freeradius,
> unfortunately I could not find any good postings, or web
> toots/examples.
Hi Robin, Welcome to the club.
> I would need to use Microsoft IAS.
Alan DeKok wrote:
You choose which group you fall into. I don't have time to care
what you think about me.
I remember when I was very new to Linux. I had made an incredibly stupid
basic networking mistake and was trying to find out why a specific Linux
ethernet driver was "acting up". The es
On Sun, 20 Nov 2005, Alan DeKok wrote:
> Laker Netman <[EMAIL PROTECTED]> wrote:
>
> You're completely down the wrong path. AD is a database. It's a
> directory. Using anonymous bind, there is very little data you can
> get from it.
>
> Stop talking about solutions, as you don't know how th
Laker Netman <[EMAIL PROTECTED]> wrote:
> Not sure I understand. To my knowledge, currently our
> AD doesn't contain any info that would differentiate a
> "wireless" user from one who is "wired". Based on the
> authenticating NAS (which is identifiable as wired vs
> wireless at least to RADIUS) ho
Comments below.
--- Alan DeKok <[EMAIL PROTECTED]> wrote:
> Laker Netman <[EMAIL PROTECTED]> wrote:
> > First: We do not allow anonymous binding to our AD
> > LDAP. So, for testing to date, I have used
> > "Administrator" and the associated password in the
> > config file. Obviously this is less
Laker Netman <[EMAIL PROTECTED]> wrote:
> First: We do not allow anonymous binding to our AD
> LDAP. So, for testing to date, I have used
> "Administrator" and the associated password in the
> config file. Obviously this is less than ideal :)
> What is the best or better alternative? Allowing
> a
> If I want to use WPA with TKIP (or preferably AES) do
> I *have* to have a supplicant? Most hosts will be XP,
WPA uses TKIP
WPA2 uses AES
Both use 802.1x/EAP with whatever cocktail of options you convolute.
> though there is a slim chance I may have to deal with
> others.
> Lastly, as I me
Hi all. I have been running freeradius for quite a
while now to authenticate dial-up users through our
Cisco 3660. Additionally, I configured several of our
internal devices for AAA. This has all worked quite
well and I have been using a MySQL backend.
Now I am getting ready to deploy a wireless
11 matches
Mail list logo