Categories
Firewall LDAP Linux Network radius Ubuntu VLAN

freeradius on OPNsense: Use VLAN based on LDAP group

The main challenge to do so, is to make this change permanent (as the OPNsense web frontend does not support that kind of config modification). So here’s a short wrap up of the things required: Now edit custom.users: Rebuild the template files and restart freeradius: And the tests results look like this: In my case […]

Categories
Directory Service Kerberos LDAP Linux

Joining Ubuntu client to Active Directory

…or to be exact: the Samba version of it 🙂 So as an Open Source guy I obviously don’t run a Microsoft Active Directory. However since Samba version 4 this software does not only support file and print services, it also can act as an Active Directory. And guess what: That’s what I do. Unfortunately […]

Categories
Apache Directory Service LDAP Webserver

Apache authentication with Active Directory (no proxy account required)

While playing around with Apache web server authentication I was wondering: Is it possible to authenticate Apache against LDAP without requiring a proxy account to do the queries? At first glance this seems to require an LDAP server that allows anonymous bind and read access, however there’s another way: If a regular user (of the […]