Re: wireless+freeradius+AD

2005-11-22 Thread Alan DeKok
Robin Mordasiewicz <[EMAIL PROTECTED]> wrote: > I made a trip to my local bookstore and just read in the oreilly 802.11 > book on building wireless infrastructure that I would need to use > Microsoft IAS. Is this false ? Yes. I think, though, at the time the book was written, machine authenti

RE: wireless+freeradius+AD

2005-11-21 Thread David Antognini
Yes I too would like some help with this. This what I am trying to do: 1. authenticate via chap (from chillispot) to freeradius, using unix shadow passwords or pam.. I followed the pam directions and it works fine for pap, but not chap.. 2. also, would like to get it to work via AD (kerberos et

RE: wireless+freeradius+AD

2005-11-21 Thread Robin Mordasiewicz
On Mon, 21 Nov 2005, King, Michael wrote: > > Oh, excellent. I just joined this list hoping to query the > > members on finding more information on doing > > wireless+activedirectory+freeradius, > > unfortunately I could not find any good postings, or web > > toots/examples. > > Hi Robin, Welcome

RE: wireless+freeradius+AD

2005-11-21 Thread King, Michael
> Oh, excellent. I just joined this list hoping to query the > members on finding more information on doing > wireless+activedirectory+freeradius, > unfortunately I could not find any good postings, or web > toots/examples. Hi Robin, Welcome to the club. > I would need to use Microsoft IAS.

Re: wireless+freeradius+AD

2005-11-20 Thread Lewis Bergman
Alan DeKok wrote: You choose which group you fall into. I don't have time to care what you think about me. I remember when I was very new to Linux. I had made an incredibly stupid basic networking mistake and was trying to find out why a specific Linux ethernet driver was "acting up". The es

Re: wireless+freeradius+AD

2005-11-20 Thread Robin Mordasiewicz
On Sun, 20 Nov 2005, Alan DeKok wrote: > Laker Netman <[EMAIL PROTECTED]> wrote: > > You're completely down the wrong path. AD is a database. It's a > directory. Using anonymous bind, there is very little data you can > get from it. > > Stop talking about solutions, as you don't know how th

Re: wireless+freeradius+AD

2005-11-20 Thread Alan DeKok
Laker Netman <[EMAIL PROTECTED]> wrote: > Not sure I understand. To my knowledge, currently our > AD doesn't contain any info that would differentiate a > "wireless" user from one who is "wired". Based on the > authenticating NAS (which is identifiable as wired vs > wireless at least to RADIUS) ho

Re: wireless+freeradius+AD

2005-11-19 Thread Laker Netman
Comments below. --- Alan DeKok <[EMAIL PROTECTED]> wrote: > Laker Netman <[EMAIL PROTECTED]> wrote: > > First: We do not allow anonymous binding to our AD > > LDAP. So, for testing to date, I have used > > "Administrator" and the associated password in the > > config file. Obviously this is less

Re: wireless+freeradius+AD

2005-11-19 Thread Alan DeKok
Laker Netman <[EMAIL PROTECTED]> wrote: > First: We do not allow anonymous binding to our AD > LDAP. So, for testing to date, I have used > "Administrator" and the associated password in the > config file. Obviously this is less than ideal :) > What is the best or better alternative? Allowing > a

Re: wireless+freeradius+AD

2005-11-18 Thread Brian A. Seklecki
> If I want to use WPA with TKIP (or preferably AES) do > I *have* to have a supplicant? Most hosts will be XP, WPA uses TKIP WPA2 uses AES Both use 802.1x/EAP with whatever cocktail of options you convolute. > though there is a slim chance I may have to deal with > others. > Lastly, as I me

wireless+freeradius+AD

2005-11-18 Thread Laker Netman
Hi all. I have been running freeradius for quite a while now to authenticate dial-up users through our Cisco 3660. Additionally, I configured several of our internal devices for AAA. This has all worked quite well and I have been using a MySQL backend. Now I am getting ready to deploy a wireless