RADIUS Server w/ or on OS X Server and Automounts

[johnkharrison]

Dual 1.4 GHZ G4 Parent Server running NetInfo and LDAP for authentication, advanced passwords.

Curious how RADIUS authentication over wireless works for users with network home folders. Does Radius authenticate during bootup- before automounts? How could or does this work with non-local users on machines where automounts are necessary? I have authenticated OS X clients off a CISCO RADIUS server after bootup, but can’t quite get how the clients would utilize the resource if they need automounted home folders.

Is there a way to use the pre existing NetInfo/LDAP user DB on the OS X Password Server for RADIUS? Has anyone tried this? Can a CISCO RADIUS server point to an OS X Server LDAP directory for authentication?

[johnkharrison]

The Cisco LEAP authentication works great- after boot up. But the issue seems to be getting the username and password to bind to the client machines so that automounts can happen for roaming profiles. Panther does not have the option for saving the username and password in the keychain for LEAP authentication. So yes, I can utilize RADIUS with local logins, but I have not figured out how to utilize RADIUS with networked home folders. Is there a way to bind a username and password to a client machine so that the machine automatically authenticates to RADIUS at boot?

The Windows users aren’t authenticated until they put in their passwords and usernames- but due to the nature of User folders’ automounts, that isn’t going to work for the Macs.

I also tried putting username and password in brackets That seems to work on Jaguar, but somewhat intermittently.

Also– interestingly enough- The only vendor wireless products supported by Cisco Access Radius Server is Apple and Cisco. Lucked out on that one….

[Author]

Posts