This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Pages: [1]
1
Installation and Upgrades / Re: HowTo: add radius module with mschap support to zentyal 4.1
« on: November 06, 2015, 01:54:59 pm »i've changed/fixed, please test it...
Tested for 4.1 x86. Working flawlessly!
Thank you.
2
Installation and Upgrades / Re: HowTo: add radius module with mschap support to zentyal 4.1
« on: November 05, 2015, 08:40:43 pm »Bug is fixed, please try one more time...
Thank you very much.
I was able to compile the module and the group filter indeed is working as expected.
There are only two things I noticed that need fixing/improving (but can be "worked-around"):
- The diff files in your instructions are referencing the folder "zentyal-radius-4.0" instead of "zentyal-radius-4.1", causing errors when patching. Editing the files and replacing all the occurrences with the "4.1" path solves the problem.
- After installed, if the selected group has spaces in its name, the Freeradius service is unable to start, logging errors when trying to parse "/etc/freeradius/users". Editing the file and enclosing the group's name in double quotes solves the problem, but gets undone since Zentyal rewrites the config files. A workaround (which I had to use) is to rename the group, removing all blank spaces, and then let Zentyal save its configurations again.
Again, thanks!
3
Installation and Upgrades / Re: Upgrade to 4.2 uninstalls Zentyal domain controller
« on: November 04, 2015, 01:21:44 pm »
Same problem here.
Just tried updating to 4.2 on a really old x86 server (which still works perfectly fine) and this dependency problem left me without any Samba / AD functionality.
Are there any chances this package can be released for x86 too?
Thanks.
Just tried updating to 4.2 on a really old x86 server (which still works perfectly fine) and this dependency problem left me without any Samba / AD functionality.
Are there any chances this package can be released for x86 too?
Thanks.
4
Installation and Upgrades / Re: HowTo: add radius module with mschap support to zentyal 4.1
« on: October 22, 2015, 04:18:38 pm »
julio, thanks for going through the trouble of making and sharing this.
I've followed your instructions and successfully built the RADIUS module. Authentication works perfectly from radtest (with mschap) and from a Mikrotik router (for L2TP authentication).
There's just one detail that is not working as expected: No matter what group I choose at Zentyal's web interface, the RADIUS server will authenticate ANY valid user, regardless of the user being part of the specified group or not. As long as it's a valid domain account, it'll reply with an "Accept-Accept".
I've checked that the group is correcly being set inside /etc/freeradius/users:
and also tried to manually edit it, using the full DN, but it makes no difference:
I don't have any experience with Freeradius, so I'm a bit lost about what can be causing this.
Running Zentyal 4.1 x86 (old server), if it makes any difference.
Any help is very much appreciated.
I've followed your instructions and successfully built the RADIUS module. Authentication works perfectly from radtest (with mschap) and from a Mikrotik router (for L2TP authentication).
There's just one detail that is not working as expected: No matter what group I choose at Zentyal's web interface, the RADIUS server will authenticate ANY valid user, regardless of the user being part of the specified group or not. As long as it's a valid domain account, it'll reply with an "Accept-Accept".
I've checked that the group is correcly being set inside /etc/freeradius/users:
Code: [Select]
DEFAULT LDAP-Group == <group name>
and also tried to manually edit it, using the full DN, but it makes no difference:
Code: [Select]
DEFAULT LDAP-Group == "CN=group,OU=foo,DC=bar,DC=com"
I don't have any experience with Freeradius, so I'm a bit lost about what can be causing this.
Running Zentyal 4.1 x86 (old server), if it makes any difference.
Any help is very much appreciated.
Pages: [1]