Difference between revisions of "FreeRADIUS WPA2-Enterprise Windows Active Directory"
Jump to navigation
Jump to search
Michael.mast (talk | contribs) (Created page with " [root@radius02 ~]# yum install samba-winbind-clients samba [root@radius02 ~]# mv /etc/samba/smb.conf /etc/samba/smb.conf.bak [root@radius02 ~]# nano /etc/samba/smb.conf [...") |
Michael.mast (talk | contribs) |
||
| (7 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
| + | <ref>https://blog.practichem.com/configuring-freeradius-for-wpa2-enterprise-with-active-directory-integration-on-ubuntu-1404/</ref><ref>http://deployingradius.com/documents/configuration/active_directory.html</ref><ref>http://wiki.freeradius.org/protocol/EAP#eap-sub-types_peap</ref> | ||
[root@radius02 ~]# yum install samba-winbind-clients samba | [root@radius02 ~]# yum install samba-winbind-clients samba | ||
[root@radius02 ~]# mv /etc/samba/smb.conf /etc/samba/smb.conf.bak | [root@radius02 ~]# mv /etc/samba/smb.conf /etc/samba/smb.conf.bak | ||
| Line 7: | Line 8: | ||
password server = your.domain.net | password server = your.domain.net | ||
realm = your.domain.net | realm = your.domain.net | ||
| + | [root@radius02 ~]# nano /etc/krb5.conf | ||
| + | [realms] | ||
| + | # EXAMPLE.COM = { | ||
| + | # kdc = kerberos.example.com | ||
| + | # admin_server = kerberos.example.com | ||
| + | # } | ||
| + | |||
| + | your.domain.net = { | ||
| + | |||
| + | kdc = **your.domain.net** | ||
| + | |||
| + | } | ||
| + | [root@radius02 ~]# systemctl start smb | ||
| + | [root@radius02 ~]# net join -u Administrator | ||
[root@radius02 ~]# systemctl start winbind | [root@radius02 ~]# systemctl start winbind | ||
[root@radius02 ~]# ntlm_auth --request-nt-key --domain=domain --username=user --password=password | [root@radius02 ~]# ntlm_auth --request-nt-key --domain=domain --username=user --password=password | ||
NT_STATUS_OK: Success (0x0) | NT_STATUS_OK: Success (0x0) | ||
| + | [root@radius02 ~]# nano /etc/raddb/mods-available/ntlm_auth | ||
| + | exec ntlm_auth { | ||
| + | wait = yes | ||
| + | program = "/usr/bin/ntlm_auth --request-nt-key --domain=your --username=%{mschap:User-Name} --password=%{User-Password}" | ||
| + | } | ||
| + | [root@radius02 ~]# nano /etc/raddb/mods-available/mschap | ||
Latest revision as of 14:40, 18 October 2016
[root@radius02 ~]# yum install samba-winbind-clients samba
[root@radius02 ~]# mv /etc/samba/smb.conf /etc/samba/smb.conf.bak
[root@radius02 ~]# nano /etc/samba/smb.conf
[global]
workgroup = your
security = ads
password server = your.domain.net
realm = your.domain.net
[root@radius02 ~]# nano /etc/krb5.conf
[realms]
# EXAMPLE.COM = {
# kdc = kerberos.example.com
# admin_server = kerberos.example.com
# }
your.domain.net = {
kdc = **your.domain.net**
}
[root@radius02 ~]# systemctl start smb
[root@radius02 ~]# net join -u Administrator
[root@radius02 ~]# systemctl start winbind
[root@radius02 ~]# ntlm_auth --request-nt-key --domain=domain --username=user --password=password
NT_STATUS_OK: Success (0x0)
[root@radius02 ~]# nano /etc/raddb/mods-available/ntlm_auth
exec ntlm_auth {
wait = yes
program = "/usr/bin/ntlm_auth --request-nt-key --domain=your --username=%{mschap:User-Name} --password=%{User-Password}"
}
[root@radius02 ~]# nano /etc/raddb/mods-available/mschap
