Home / server / Questions / 472358
In Process
hoberion
Asked: 2013-01-26 03:48:14 +0800 CST

possible? radius server with active directory users and google authentication

  • 772

We currently have an old RSA token - Radius environment we want to replace

Would this architecture be possible?

(this works, there are examples on the internet) Linux server Google Authentication Fee radius server

Now the new part: User list would get pulled from active directory, on the linux server the google authenticatior token would be (manually generated)

Or should we just create the users with the same name manually?

freeradius

1 Answers

  1. Yes, this should be possible with totpcgi and freeradius, though we've not done it against AD but FreeIPA. We use this setup on our Cisco VPN appliances and users authenticate with their username and password+token (i.e. the same behaviour as RSA tokens).

    I'd love to have more input on how well it works for others, especially if someone can provide documentation on how to drop-replace RSA infrastructure with totpcgi in a heterogeneous Linux-Windows environment. :) Our primary goal thus far has been implementing it for Linux servers.

    • 1