Archive for the ‘Radius’ Category

One of the things I'm looking into to make the life of those remaining easier when I leave, is whether we should try to migrate (I call it downgrade) from OpenLDAP to Active Directory.
Under normal circumstances, I'd never, ever suggest this, and the only reasons I'm doing it now are:

The organization is deploying a [...]

Tuesday, October 6th, 2009 at 14:20 | 1 comment
Categories: LDAP, Radius
Tags:

I spend a good part of my time ensuring that whatever services we offer will be up and running 24/7. Be it an Exim cluster, a failsafe BlackBerry Enterprise Server, MySQL on DRBD, multiple DNS servers, LDAP directory servers, you name it: whatever services we offer are very hard to kill.
Then comes some twerp and [...]

Tuesday, September 19th, 2006 at 12:11 | 1 comment
Tags:

I've updated my whatmon Mozilla extension to include a very useful patch by Heiko Weber which causes whatmon to open a new browser window to display additional information.
Read the documentation and download whatmon or wait a wee bit until it is visible on the Mozilla Addons Site.

Thursday, August 3rd, 2006 at 12:09 | 0 comments
Tags:

Because one of our clients thinks that two Radius servers are not enough, I'm creating a couple of VMware appliances which will be hosting an OpenLDAP-driven FreeRADIUS daemon on them with which we'll be authorizing 802.1x appliances.
Due to the fact that my master OpenLDAP servers (and their slaves) are currently still on version 2.2, I [...]

Wednesday, June 28th, 2006 at 17:48 | 0 comments
Categories: LDAP, Linux, Radius, Vmware
Tags:

FreeRADIUS can execute arbitrary programs when an authorization or authentication request arrives from a NAS(Network Access Server), by using the exec module; that is what I've implemented to solve my dilemma.
A stanza

exec jxrad {
wait = yes
program = "/etc/raddb/bin/jxrad %{Stripped-User-Name}"
input_pairs = request config
}

in the modules section as well as an [...]

Wednesday, June 14th, 2006 at 11:47 | 0 comments
Categories: LDAP, Linux, MySQL, Radius
Tags:

It is quite incredible what "FreeRadius":http://www.freeradius.org/ can do. At a customer site I've got a server which is doing authentication and authorization (as well as accounting of course) for a number of different NAS, each servicing distinct groups of people. Examples are VPN users, regular dial-up, Wireless with 802.1x and also administrative ssh logins to [...]

Wednesday, September 7th, 2005 at 13:03 | 0 comments
Categories: LDAP, Radius, SSH
Tags:
TOP