Nazaretyan's blog

Tag: ad

how to configure Confluence 3.x to use user/groups from Windows 2008R2 Domain controller

by Moushegh Nazaretyan on Jun.08, 2010, under how to

just get installed Confluence 3.x from atlassian.com, and dicide to use active directory for autorization.

benefits are that for new employers you dont need to open secondary accesses, give them more then 1 password for accessing network recourses.

(continue reading…)

Leave a Comment :, , , , more...

how to connect windows 2008R2 to windows 2003R2 Domain controller

by Moushegh Nazaretyan on May.03, 2010, under how to, interesting

Few days ago i get a chance to configure new windows 2008R2 on already working infrastructure with windows2003R2,
main goad was to create RODC (read only domain controller) within AD.
after starting the project i get few real interesting situations that want to share.

(continue reading…)

1 Comment :, , , , more...

Lesson 3. freeRadius + mschap

by Moushegh Nazaretyan on Oct.26, 2009, under how to

Once you have the previous steps working, configuring FreeRADIUS to use ntlm_auth for MS-CHAP is simple. First, delete the testing entry used above from the users file, as leaving it in will break other authentication types. Then, fine the mschap module in raddb/modules/mschap file, and look for the line containing ntlm_auth = . It is commented out by default, and should be uncommented, and edited to be as follows. As before, update the fields in bold to match your local configuration.

ntlm_auth = “/path/to/ntlm_auth –request-nt-key –username=%{mschap:User-Name:-None} –domain=%{mschap:NT-Domain:-MYDOMAIN} –challenge=%{mschap:Challenge:-00} –nt-response=%{mschap:NT-Response:-00}”

Start the server and use a test client to send an MS-CHAP authentication request. The radclient cannot currently be used to send this request, unfortunately, which makes testing a little difficult If everything goes well, you should see the server returning an Access-Accept message as above.

Leave a Comment :, , , , , , , more...

Lesson 1. Samba and AD

by Moushegh Nazaretyan on Oct.26, 2009, under how to

Once Samba has been installed on your system, you should edit the smb.conf file, and configure the [global] section to point to your NT server, including hostname and NT domain.

# workgroup = NT-Domain-Name
workgroup = MYDOMAIN

# Security mode. Most people will want user level security. See
# security_level.txt for details.
security = ads
# Use password server option only with security = server
password server = nt-server-hostname.company.com

realm = realm.company.com

(continue reading…)

Leave a Comment :, , , more...

Get Adobe Flash playerPlugin by wpburn.com wordpress themes

Looking for something?

Use the form below to search the site:

Still not finding what you're looking for? Drop a comment on a post or contact us so we can take care of it!