Re: Freeradius and IPA possible
Ville Leinonen via Freeradius-Users <[email protected]>
| Newsgroups | gmane.comp.freeradius.user |
|---|---|
| Message-ID | <[email protected]> |
Hi, Thank you for the replies. I will try to upgrade 3.0.27 (I assume that there is some fixes is ldap part + security fixes) and check what is says. I have already got ldap working, so it founds user, but there is something wrong after that. Regards, Ville On 30.04.2025 18:08, Jostein Fossheim via Freeradius-Users wrote: > Ville Leinonen: > > We where hoping to contribute some upgraded documentaion, connected to > schema-upgrade for dictionary attriubutes and hunt groups, but haven’t > found time to produce anything usefull yet. > > You find several guides just by googling that covers the basics, and > the information given by Alan should get you a long way. > > There might be some contrainuitive things to figure out, when it comes > to ACLs in the ldap tree, so it all depends how fluent you are in > working with ldap. > -- > Jostein Fossheim > > >> On 30 Apr 2025, at 16:57, Alan DeKok <[email protected]> >> wrote: >> >> On Apr 30, 2025, at 10:09 AM, Ville Leinonen via Freeradius-Users >> <[email protected]> wrote: >>> I installed FreeRadius version 3.0.21 with ldap and krb modules and >>> installed IPA server version 4.12.2. I would now like to use IPA as a >>> backend server and authenticate my remote users using radius. >> >> You should upgrade to 3.0.27, but OK. >> >>> I would like to ask if this is possible and if there are any >>> instructions on how to do it. >> >> IPA is just an LDAP database. You should: >> >> * configure mods-available/ldap >> >> It has instructions for testing with an ldapsearch command line tool. >> >> * link mods-enabled/ldap --> mods-available/ldap >> >> * start the server in debug mode >> >> * use radtest to send a request with a name / password. >> >> * Verify that the server receives the packets && checks ldap >> >> * see that an Access-Accept is returned. >> >> It's really quite simple. The hardest part is configuring the ldap >> module. And the file mods-available/ldap detailed instructions. >> >> And, as always, run the server in debug mode when you need to debug >> the server. >> >> Alan DeKok. >> >> - >> List info/subscribe/unsubscribe? See >> http://www.freeradius.org/list/users.html > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html