Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible and if so how, to make users use an external RADIUS server to connect to Windows shares?

share|improve this question
up vote 0 down vote accepted

I don't think that this can be done. Windows itself only uses AD to authorize and authenticate users. The only way that I think this could be done would be if you had another system using Kerberos, that could use RADIUS as the user backend, and then make a trust between your Windows AD and the Kerberos domain. I don't know if such a product exists.

share|improve this answer
It may be possible by using samba server as slave with windows AD – MealstroM Mar 31 '11 at 12:19
It does seem that you can enable Samba to do authentication using RADIUS as the backend if you enable clear-text passwords. But then those aren't Windows shares, are they - they're Linux shares served by Samba. – mfinni Mar 31 '11 at 13:01
hm. it seems possible to user radius with AD. and setup raidiues server. Port forward local radius port to external server and make correct policy on remote. – MealstroM Mar 31 '11 at 13:18
Yes, I know how to set up RADIUS (IAS) to use AD as a backend; that's what IAS is for. You can't use IAS for authenticating users for file-sharing in Windows, it's only for remote access. – mfinni Mar 31 '11 at 13:25

Assuming by Windows Shares you want something CIFS compatible...

In which case the best route might be to start a Samba server and configure it to use RADIUS Auth, which is well supported by smbd.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.