Hello, I am wondering whether it is possible / recommended or not, to install and use freeradius on a domain controller. The documentation at https://wiki.samba.org/index.php/Authenticating_Freeradius_against_Active_Directory is about installation/configuration on member servers only. Any thoughts? What changes on a dc? Thanks, Joachim
On Tue, 2022-11-29 at 22:31 +0100, Joachim Lindenberg via samba wrote:> Hello, > > I am wondering whether it is possible / recommended or not, to > install and use freeradius on a domain controller. The documentation > at > https://wiki.samba.org/index.php/Authenticating_Freeradius_against_Active_Directory > is about installation/configuration on member servers only. > > Any thoughts? What changes on a dc?It should still just work, as the same winbindd is under the hood and this mode of operation is connected, but running a member server allows more separation of concerns and avoids any DC being 'special'. VMs or containers are good for this. Andrew Bartlett -- Andrew Bartlett (he/him) https://samba.org/~abartlet/ Samba Team Member (since 2001) https://samba.org Samba Team Lead, Catalyst IT https://catalyst.net.nz/services/samba Samba Development and Support, Catalyst IT - Expert Open Source Solutions
3 of our 4 DCs are Radius servers and it works without problems. Regards Christian Am 29.11.22 um 22:31 schrieb Joachim Lindenberg via samba:> Hello, > > I am wondering whether it is possible / recommended or not, to install and use freeradius on a domain controller. The documentation at https://wiki.samba.org/index.php/Authenticating_Freeradius_against_Active_Directory is about installation/configuration on member servers only. > > Any thoughts? What changes on a dc? > > Thanks, > > Joachim >-- Dr. Christian Naumer Vice President Unit Head Bioprocess Development BRAIN Biotech AG Darmstaedter Str. 34-36 64673 Zwingenberg, Germany T: +49 6251 9331-30 F: +49 6251 9331-11 cn at brain-biotech.com www.brain-biotech.com Sitz der Gesellschaft: Zwingenberg | Bergstrasse Registergericht AG Darmstadt | HRB 24758 Vorstand: Adriaan Moelker (Vorstandsvorsitzender) | Michael Schneiders Aufsichtsratsvorsitzender: Dr. Georg Kellinghusen