search for: freerad

I can share my notes, we authenticate UniFi clients via Freeradius against Samba AD. We also check group membership which you might or might not need: ## 4 FreeRADIUS ### 4.1 Basics ```bash apt install freeradius freeradius-ldap freeradius-utils # create new DH-params openssl dhparam -out /etc/freeradius/3.0/certs/dh 2048 ``` ### 4.2 Configure Authenticati...

...nnected: app_prepaid: cannot connect to database server localhost. Calls will not be logged == Registered application 'Prepaid' Here is pgsql confs; pg_hba.conf: ------------ local all asterisk 127.0.0.1 255.255.255.0 trust local all prepaid 127.0.0.1 255.255.255.0 trust local all freerad 127.0.0.1 255.255.255.0 trust pg_indent.conf: --------------- # MAPNAME IDENT-USERNAME PG-USERNAME asterisk asterisk asterisk prepaid prepaid prepaid freerad freerad freerad prepaid.conf: ------------- [global] hostname=localhost dbname=prepaid password=asterisk user=asterisk port=...

Hello Alexander, thanks Alexander for these configuration snippets. Which version of Samba are you using? Is this on debian bullseye? Is the FreeRADIUS server installed on a DC or on a Domain Member? (I just tested the latter). is "ntlm auth = yes" OK for the DCs and the domain member or does it have to be "mschapv2-and-ntlmv2-only" for all servers (DCs + Member)? It looks like "yes" is broader and it should wo...

...atthias K?hne | Ellerhold > Aktiengesellschaft via samba <samba at lists.samba.org> wrote: > Hello Alexander, > > thanks Alexander for these configuration snippets. > > Which version of Samba are you using? Is this on debian bullseye? > Is the > FreeRADIUS server installed on a DC or on a Domain Member? (I just > tested the latter). > > is "ntlm auth = yes" OK for the DCs and the domain member or does it > have to be "mschapv2-and-ntlmv2-only" for all servers (DCs + > Member)? It > looks li...

...atthias K?hne | Ellerhold Aktiengesellschaft via samba <samba at lists.samba.org (mailto:samba at lists.samba.org)> wrote: > Hello Alexander, > > thanks Alexander for these configuration snippets. > > Which version of Samba are you using? Is this on debian bullseye? Is the > FreeRADIUS server installed on a DC or on a Domain Member? (I just > tested the latter). > > is "ntlm auth = yes" OK for the DCs and the domain member or does it > have to be "mschapv2-and-ntlmv2-only" for all servers (DCs + Member)? It > looks like "yes" is bro...

Hello Tim, Hello samba-people, is there an uptodate guide for authenticating via freeradius somewhere? I have some Ubiquiti APs plus a Cloud Key and I want to authenticate WLAN clients via WPA2-Enterprise instead of a (shared) PSK. It seems like https://wiki.samba.org/index.php/Authenticating_Freeradius_against_Active_Directory is missing some steps (basic setup of freeradius). C...

Hi, My goal is to make use of samba 4 and freeradius to authenticate user to use wifi network (WPA2 enterprise). The setup is to setup Samba 4.0.3 in machine A and setup freeradius in machine B. By reading: Document A: http://wiki.samba.org/index.php/Samba4/beyond Document B: https://wiki.samba.org/index.php/Samba4/HOWTO/Virtual_Private_Network...

Hello, I am trying to use the smbpasswd file from Samba as the password backend for FreeRADIUS. I already managed to get FreeRADIUS to work, but Samba keeps resetting the smbpasswd permissions to: iserv samba # ll /etc/samba/smbpasswd -rw------- 1 root root 4.9K 2008-04-11 10:26 /etc/samba/smbpasswd The permissions have to look like this so FreeRADIUS can access it: # chgrp freerad /et...

Hai, It does not happen often but yes, i also need some help as i cant know everything also and im new with freeradius. Im working on a configuration for samba member + freeradius with ntlm_auth. Why ntlm_auth, because the next one is kerberos and ldap auth to configure.. I want to have some fallback options here and you have to start somewhere. This is running on my new proxy/gateway server, which also us...

Hi there, I'm trying to get FreeRADIUS to authenticate against my Samba DC. It's Samba 4.7.6-ubuntu running on Ubuntu 18 (kernel version 4.15.0-66-generic). It came nicely packaged with Zentyal, which provides a nice GUI for managing a domain, as well as a CA and lots of cool small features. That same Zentyal also includes su...

I compiled a new binary on OS X and now it I'm having a few problems. Everything is working just fine including SWAT, but now I have permission errors: http://mywebpages.comcast.net/freeradical/smberror.jpg I didn't change a thing in my smb.conf, just updated the SMB binaries, so what might be wrong this time? BTW, I symlinked all the new binaries to their default locations and renamed the originals *.bak. It seems i'm having permission problems: [2003/04/14 13:51:37, 0]...

...o name of the domain. ntlm_auth = "/usr/bin/ntlm_auth --allow-mschapv2 --request-nt-key --username=%{mschap:User-Name:-None} --domain=DOMAIN --challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}" Do you users login in with DOMAIN\user or just user? Ours do both. Freeradius version on our side is 3.0.13. Regards Am 30.08.19 um 12:11 schrieb L.P.H. van Belle via samba: > Hai, > > It does not happen often but yes, i also need some help as i cant know everything also and im new with freeradius. > > Im working on a configuration for samba member...

...ds the weekend.. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Christian Naumer via samba > Verzonden: vrijdag 30 augustus 2019 12:53 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Samba 4.10.7 + freeradius 3.0.17 > +ntlm_auth - Debian buster > > We have this running but on a DC (Samba 4.10.7). > > we have this line in /etc/raddb/mods-enabled/mschap. Only this line! > DOMAIN is the actual netbio name of the domain. > > > ntlm_auth = "/usr/bin/ntlm_auth --allow-m...

Hai, Have you seen : https://wiki.samba.org/index.php/Authenticating_Freeradius_against_Active_Directory Test with : ntlm_auth --allow-mschapv2 --request-nt-key --domain=COMPANY --username=domainuser --password=userpassword Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Oleg > Blyahher via...

...s > > >> -----Oorspronkelijk bericht----- >> Van: samba [mailto:samba-bounces at lists.samba.org] Namens >> Christian Naumer via samba >> Verzonden: vrijdag 30 augustus 2019 12:53 >> Aan: samba at lists.samba.org >> Onderwerp: Re: [Samba] Samba 4.10.7 + freeradius 3.0.17 >> +ntlm_auth - Debian buster >> >> We have this running but on a DC (Samba 4.10.7). >> >> we have this line in /etc/raddb/mods-enabled/mschap. Only this line! >> DOMAIN is the actual netbio name of the domain. >> >> >> ntlm_auth = &q...