On 6 Feb 2018, at 10:16, barrykfl--- via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org
<mailto:freeipa-users@lists.fedorahosted.org>> wrote:
Hi :
Anyone has exp to use freeipa 4.0 above as radius server ? e.g want wifi
use radius everyone carry ldap password.
How to implement ? need special plugin ? seem it need new
attribute can generate harsh password and syn with LDAP together ?
Hello Barry!
Yes, I’ve successfully set up RADIUS integration with MSCHAPv2, following these two blog
posts:
-
http://firstyear.id.au/blog/html/2015/07/06/FreeIPA:_Giving_permissions_t...
<
http://firstyear.id.au/blog/html/2015/07/06/FreeIPA:_Giving_permissions_t...
-
http://firstyear.id.au/blog/html/2016/01/13/FreeRADIUS:_Using_mschapv2_wi...
<
http://firstyear.id.au/blog/html/2016/01/13/FreeRADIUS:_Using_mschapv2_wi...
I’ve enhanced my setup a little by using a kerberos keytab instead of a password for the
RADIUS service. If you do that, don’t forget to add the keytab to the GSSProxy
configuration for it to be renewed automatically.
--
Aljaž Srebrnič a.k.a g5pw
My public key:
https://g5pw.me/key <
https://g5pw.me/key>
Key fingerprint = 2109 8131 60CA 01AF 75EC 01BF E140 E1EE A54E E677