[Freeipa-users] connecting freeipa server with free radius

[Rachid Zarouali]

Hello Dimitri,
I'll try to answer your questions the best i can :-)

Basically we plain to use the ldap ipa password.
at first we want to use radius for authentication only.

i'm not sure about what you call outer/inner methods :(
the base of the authentication is the project is the ipa ldap
on which we try to connect a freeradius server which is used to authenticate admin's on router/firewall .....

am i clear ?
sorry if not, i'm a far better system architect than a network guy :)


On Tue, Aug 25, 2009 at 12:08:08PM -0400, Dmitri Pal wrote:
> Hello Richard,
> 
> Rachid Zarouali wrote:
> > Thanks for the answer John,
> >
> > let me explain what we want to do :
> > we have several network equipments (firewall, router....)
> > on which we want to add a radius authentification using freeradius.
> > to have a central authentification system (network, servers...)
> > i'm searching for a way to connect freeradius to the ipa system.
> >
> > like it can be done between openldap and freeradius.
> >
> > am i clear ?
> > if not let me know i'll put more details.
> >
> >   
> Devil is in details. What kind of authentication methods you are
> planning to use (hardware supports)?
> Outer methods, inner methods? What would be the credential the user
> would use to authenticate?
> Is it IPA user's kerberos password?
> Do you plan to use radius for authentication only or you also want to
> configure the user session and/or device via RADIUS response to
> authentication?
> 
> Thank you
> Dmitri