AFP548 Changing the world one server at a time.

Has anyone gotten the 10.6 VPN service working with AD Kerberos auth

Home › Forums › OS X Server and Client Discussion › Questions and Answers › Has anyone gotten the 10.6 VPN service working with AD Kerberos auth

Viewing 3 posts - 1 through 3 (of 3 total)
  • Author
    Posts
  • September 22, 2011 at 4:41 pm #381223
    J.I.
    Participant

    According to the 10.6 Network Service Admin guide you should be able to authenticate VPN-L2TP users using Active Directory kerberos credentials. My understanding is the VPN server handles the communication with the AD KDC and passes the TGT and TGS to the client machine.

    An exert from the network service admin guide:
    To use VPN service for users in a third-party LDAP domain (an Active Directory or Linux OpenLDAP domain), you must be able to use Kerberos authentication

    I assume this means it should work, but I have not been able to get kerberos authentication working with the VPN service.

    Has anyone out there been able to get 10.6 VPN working with AD kerberos authentication?

    December 5, 2011 at 9:27 am #381458
    tomek
    Participant

    I’ve tried to accomplish this with both 10.6 and 10.7. I’ve even tried augmented user records and I have figured it out. Currently, we run a 10.6 VPN cluster for a client with radius authenticating back to the Windows radius implementation and then authenticating based on a user group. I’ve spent a lot of time trying to have it authenticate via kerberos, but radius seems to be the only option.

    Anyone have any luck with 10.6/10.7 and augmented user records and/or active directory user records with the VPN service?

    December 5, 2011 at 9:27 am #381459
    tomek
    Participant

    BTW, have you had any luck accomplishing the task?

  • Author
    Posts
Viewing 3 posts - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.