I need to use CHAP on my NAS. Is it possible to authenticate FreeRadius against SAMBA 3.x? Thanks in advance for any help! Bob
Hi Bob, Yes. FreeRadius can be configured to use PAM for authentication. PAM can be configured to use pam_winbind which in turn uses Samba. This is possible. Regards, Darren On Wed, 3 Dec 2003 bdehn@oreillyauto.com wrote:> I need to use CHAP on my NAS. Is it possible to authenticate FreeRadius > against SAMBA 3.x? > > Thanks in advance for any help! > > Bob >
As freeradius supports PAM for authentication, this is trivial. Simply configure freeradius to use pam (see config files for freeradius) and then set your pam config for radius to use smb (via winbind) for authentication. Tom On Wed, 3 Dec 2003 bdehn@oreillyauto.com wrote:> I need to use CHAP on my NAS. Is it possible to authenticate FreeRadius > against SAMBA 3.x? > > Thanks in advance for any help! > > Bob >-- _______________________________________________________________________ Tom Ryan Voice: 856-225-6361 Consulting System Administrator Fax: 856-969-7900 Rutgers School of Law - Camden
On Wed, Dec 03, 2003 at 06:19:23PM -0500, Tom Ryan wrote:> As freeradius supports PAM for authentication, this is trivial. > > Simply configure freeradius to use pam (see config files for freeradius) > and then set your pam config for radius to use smb (via winbind) for > authentication. > > Tom > > On Wed, 3 Dec 2003 bdehn@oreillyauto.com wrote: > > > I need to use CHAP on my NAS. Is it possible to authenticate FreeRadius > > against SAMBA 3.x? > > > > Thanks in advance for any help! > >But that would not be CHAP. I have written a tool called ntlm_auth to allow arbitary external programs to use NTLM authentication. FreeRadius just needs to be told how to use it. I have told pppd how to use ntlm_auth, see my paper at http://hawkerc.net/staff/abartlet/comp3700 for the patch (which should serve as a good example). Andrew Bartlett