[Samba] radius auth to samba

[Andrew Bartlett]

On Mon, 2014-06-30 at 19:17 -0700, David Bear wrote:
> I want to have samba be the back end provider for authentication to a
> radius server. I found
> https://wiki.samba.org/index.php/VPN_Single_SignOn_with_Samba_AD
> 
> and wanted to see if this is 'current' and works with samba 4.1.8 -- or if
> anyone is using it.
> 
> I want to use RADIUS authentication on a firewall and have Samba be the
> source for the user accounts. I am using a pfsense firewall. Anyone
> pointers would be greatly appreciated.

It looks reasonable to me, but I suggest running radius, ntlm_auth and
winbindd on a member server, not on your DC.

Andrew Bartlett

-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba