Thank you

 

I will add this to my list of configurations to try.

 

______________________________________________________________________________________________

 

Daniel E. White
daniel.e.white@nasa.gov

NICS Linux Engineer
NASA Goddard Space Flight Center
8800 Greenbelt Road
Building 14, Room E175
Greenbelt, MD 20771

Office: (301) 286-6919

Mobile: (240) 513-5290

 

From: Ernedin Zajko <ezajko@root.ba>
Date: Wednesday, February 12, 2020 at 15:29
To: FreeIPA users list <freeipa-users@lists.fedorahosted.org>
Cc: Alex Scheel <ascheel@redhat.com>, Daniel White <daniel.e.white@nasa.gov>
Subject: Re: [Freeipa-users] Re: [EXTERNAL] Re: FreeIPA and FreeRadius (or any RADIUS)

 

Daniel,

 

There is nice how-to here

https://firstyear.id.au/blog/html/2016/01/13/FreeRADIUS:_Using_mschapv2_with_freeipa.html

 


--eZ

   

 

On Wed, Feb 12, 2020, 20:03 White, Daniel E. (GSFC-770.0)[NICS] via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:

My use case is RADIUS for network device auth, with IPA doing the underlying authentication.

The group information is all the LDAP groups a user belongs to.  This is for access control.

Our current setup uses an ancient version of RADIUS that runs on an old Solaris 9 Sparc server.  It uses the users and groups on that server to control access.

______________________________________________________________________________________________

 

Daniel E. White
daniel.e.white@nasa.gov

NICS Linux Engineer
NASA Goddard Space Flight Center
8800 Greenbelt Road
Building 14, Room E175
Greenbelt, MD 20771

Office: (301) 286-6919

Mobile: (240) 513-5290