(RADIATOR) authby LDAP_APS example

[Matt Richard]

I took my working configuration and genericized it.  Hugh, please feel 
free to include it in the goodies or use it as you see fit.  I have 
documented many lines, but lots of documentation (especially the intro) 
is left over from my original starting point.

I am running 3.17.1 - I have not yet taken the 4.0 plunge but I hope to 
look into it this summer if I can give it some time.

I have a Meru access controller which uses 802.1x authentication and 
LDAP_APS backend.  I allow three EAP types: TTLS, PEAP, and LEAP.  Leap 
doesn't work though because LDAP_APS doesn't support MSCHAPV1.  Accounts 
in Open Directory must have Apple Password Server password (aka OD 
passwords) as this won't work with crypt passwords.

I have a Cisco VPN3000 concentrator which uses Radius authentication and 
LDAP2 backend.  Since it uses an ldap bind for authentication it works 
with OD passwords and with crypt passwords.

Let me know if you find it helpful.

Best regards,

Matt

Warren Bishop wrote:
> Thanks for the testing info Hugh. One more question to who ever. I 
> notice that in the goodies folder there is a sample config for 
> everything, is there a sample for the 802.1x setup? -- Archive at 
> http://www.open.com.au/archives/radiator/ Announcements on 
> radiator-announce at open.com.au To unsubscribe, email 
> 'majordomo at open.com.au' with 'unsubscribe radiator' in the body of the 
> message. 


-- 
Matt Richard '08
Access and Security Coordinator
Computing Services
Franklin & Marshall College
matt.richard at fandm.edu
(717) 291-4157

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.open.com.au/pipermail/radiator/attachments/20080606/63be696b/attachment.html>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: radius-meru-8021x.cfg
URL: <http://www.open.com.au/pipermail/radiator/attachments/20080606/63be696b/attachment.ksh>