Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is it possible and if so how, to make users use an external RADIUS server to connect to Windows shares?

share|improve this question

1 Answer 1

up vote 0 down vote accepted

I don't think that this can be done. Windows itself only uses AD to authorize and authenticate users. The only way that I think this could be done would be if you had another system using Kerberos, that could use RADIUS as the user backend, and then make a trust between your Windows AD and the Kerberos domain. I don't know if such a product exists.

share|improve this answer
    
It may be possible by using samba server as slave with windows AD –  MealstroM Mar 31 '11 at 12:19
    
It does seem that you can enable Samba to do authentication using RADIUS as the backend if you enable clear-text passwords. But then those aren't Windows shares, are they - they're Linux shares served by Samba. –  mfinni Mar 31 '11 at 13:01
    
hm. support.mof.go.th/radius_windows.html. it seems possible to user radius with AD. and setup raidiues server. Port forward local radius port to external server and make correct policy on remote. –  MealstroM Mar 31 '11 at 13:18
    
Yes, I know how to set up RADIUS (IAS) to use AD as a backend; that's what IAS is for. You can't use IAS for authenticating users for file-sharing in Windows, it's only for remote access. –  mfinni Mar 31 '11 at 13:25

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.