Discussion:
Server Radius with two Active Directory Domain
Manuel Alejandro Nogales Soto
2018-11-09 20:32:23 UTC
Permalink
hi my name es Manuel Nogales, I'm from Bolivia, South America

i need help with a configuration of freeradius 2.1.12

I inherited this infrastructure

i have got these devices: Switch 3COM, AD DC SERVER WINDOWS 2008 and a
server radius 2.1.12 in Redhat, with AAA configuration under thesse files

/etc/raddb/modules/ntlm_auth

-------inside-----------
exec ntlm_auth{
wait = yes
program = "/usr/bin/ntlm_auth --request-nt-key --domain=mydomain
--username=% {mschap:UserName} --password=%{User-Password}"
}
/etc/raddb/modules/mschap

-------inside-----------
ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key
--username=%{mschap:User-Name:-None}
--domain=%{%{mschap:NT-Domain}:-mydomain}
--challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}
/etc/raddb/proxy.conf


-------inside-----------
realm mydomain.com{
auth_pool = my_auth_failover
}
i need to add a new domain Active Directory Zentyal with linuxmint users
without lose actual configuration, please any help will be granted, thanks.
Bolivia, South America

i need help with a configuration of freeradius 2.1.12

I inherited this infrastructure

i have got these devices: Switch 3COM, AD DC SERVER WINDOWS 2008 and a
server radius 2.1.12 in Redhat, with AAA configuration under thesse files

/etc/raddb/modules/ntlm_auth

-------inside-----------
exec ntlm_auth{
wait = yes
program = "/usr/bin/ntlm_auth --request-nt-key --domain=mydomain
--username=% {mschap:UserName} --password=%{User-Password}"
}
/etc/raddb/modules/mschap

-------inside-----------
ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key
--username=%{mschap:User-Name:-None}
--domain=%{%{mschap:NT-Domain}:-mydomain}
--challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}
/etc/raddb/proxy.conf


-------inside-----------
realm mydomain.com{
auth_pool = my_auth_failover
}
i need to add a new domain Active Directory Zentyal with linuxmint users
without lose actual configuration, plea
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/
Alan DeKok
2018-11-11 15:17:27 UTC
Permalink
Post by Manuel Alejandro Nogales Soto
i need to add a new domain Active Directory Zentyal with linuxmint users
without lose actual configuration, please any help will be granted, thanks.
Active Directory integration is handled by Samba. And Samba can't really join two different domains at the same time. You may need to run two separate copies of Samba.

Alan DeKok.



-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.ht
Continue reading on narkive:
Loading...