Authorization using Active Directory - What X.500 names?

permalink · #1 (**permalink**) 02-16-2005

This is a multi-part message in MIME format.

------=_NextPart_000_0004_01C5146F.0F2EFC30
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hi,

just a very easy question: I have successfully used FreeRadius with LDAP
for a long time, I use LDAP just for authorization. Now I need to do another
installation, this time with Active Directory. I created the domain and some
users in Windows 2003 Server. I think that freeradius configuration must be
almost the same as with ldap, but I don't get to connect because I don't
know what is the "identity" and "basedn" I have to write in radiusd.conf to
connect to Active Directory, and I don't know what is the search string I
have to use either. I have tried to connect with ldapbrowser to find it but
I didn't get it.

Anybody knows how can I get the X.500 names I have to use to connect
freeradius to active directory?

Thanks in advance,
Alejandro

______________________
Este mensaje, y en su caso, cualquier fichero anexo al mismo,
puede contener informacion clasificada por su emisor como confidencial
en el marco de su Sistema de Gestion de Seguridad de la
Informacion siendo para uso exclusivo del destinatario, quedando
prohibida su divulgacion copia o distribucion a terceros sin la
autorizacion expresa del remitente. Si Vd. ha recibido este mensaje
erroneamente, se ruega lo notifique al remitente y proceda a su borrado.
Gracias por su colaboracion.
______________________
This message including any attachments may contain confidential
information, according to our Information Security Management System,
and intended solely for a specific individual to whom they are addressed.
Any unauthorised copy, disclosure or distribution of this message
is strictly forbidden. If you have received this transmission in error,
please notify the sender immediately and delete it.
______________________

------=_NextPart_000_0004_01C5146F.0F2EFC30
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2900.2604" name=3DGENERATOR></HEAD>
<BODY>
<DIV><FONT face=3DArial size=3D2><SPAN=20
class=3D234182220-16022005>Hi,</SPAN></FONT></DIV>
<DIV><FONT face=3DArial size=3D2><SPAN=20
class=3D234182220-16022005></SPAN></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2><SPAN=20
class=3D234182220-16022005>    just a very easy=20
question: </SPAN></FONT><FONT face=3DArial size=3D2><SPAN=20
class=3D234182220-16022005>I have successfully used FreeRadius with LDAP fo=
r a=20
long time, I use LDAP just for authorization. Now I need to do another=20
installation, this time with Active Directory. I created the domain and som=
e=20
users in Windows 2003 Server. I think that freeradius=20
configuration must be almost the same as with ldap,  but I d=
on't=20
get to connect because I don't know what is the "identity"=20
and "basedn" I have to write in radiusd.conf to connect=
to=20
Active Directory, and I don't know what is the search string I have to use=
=20
either. </SPAN></FONT><FONT face=3DArial size=3D2><SPAN=20
class=3D234182220-16022005>I have tried to connect with ldapbrowser to find=
it but=20
I didn't get it.</SPAN></FONT></DIV>
<DIV><FONT face=3DArial size=3D2><SPAN=20
class=3D234182220-16022005></SPAN></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2><SPAN class=3D234182220-16022005> &nb=
sp; =20
Anybody knows how can I get the X.500 names I have to use to connect freera=
dius=20
to active directory? </SPAN></FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><SPAN class=3D234182220-16022005><FONT face=3DArial size=3D2>Thanks in=
=20
advance,</FONT></SPAN></DIV>
<P><FONT face=3DArial size=3D2>Alejandro </FONT></P>______________________<=
br>Este mensaje, y en su caso, cualquier fichero anexo al mismo,<br> puede =
contener informacion clasificada por su emisor como confidencial<br> en el =
marco de su Sistema de Gestion de Seguridad de la <br>Informacion siendo pa=
ra uso exclusivo del destinatario, quedando <br>prohibida su divulgacion co=
pia o distribucion a terceros sin la <br>autorizacion expresa del remitente=
.. Si Vd. ha recibido este mensaje <br> erroneamente, se ruega lo notifique =
al remitente y proceda a su borrado. <br>Gracias por su colaboracion.<br>__=
____________________<br>This message including any attachments may contain =
confidential <br>information, according to our Information Security Managem=
ent System,<br> and intended solely for a specific individual to whom they =
are addressed.<br> Any unauthorised copy, disclosure or distribution of thi=
s message<br> is strictly forbidden. If you have received this transmission=
in error,<br> please notify the sender immediately and delete it.<br>_____=
_________________
</BODY></HTML>

------=_NextPart_000_0004_01C5146F.0F2EFC30--

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode