Integration with FreeRadius to work 802.1x and dynamic VLANs

Andrew Bartlett abartlet at samba.org
Tue Jun 17 19:07:11 MDT 2014


On Tue, 2014-06-17 at 09:21 -0500, Christopher R. Hertel wrote:
> Nivio,
> 
> There is no integration between the two.  802.1x is a network access control
> protocol.  It works at a much lower level than Samba.  802.1x controls
> whether or not your device (workstation, tablet, smartphone, etc.) is
> permitted to send packets on the network.  Samba provides network file
> services.  These things occur at very different layers in the protocol stack.
> 
> The only integration that would be sensible would be to use a common
> authentication database.  Samba might be useful there.  Once again, that
> integration would occur well above the 802.1x layer.

Yes, and folks do exactly this - FreeRadius is used to talk to
ntlm_auth, to talk to winbind, to talk to AD.

Andrew Bartlett

-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba






More information about the samba-technical mailing list