[RADIUS] Use Active Directory users & password ?

[nolme]

Hi,

I'm configuring RADIUS for IPSEC VPN on Netgear VPN Router.
So, on the router, I'm using XAuth with RADIUS.
On the NAS (TS-439-U-RP), I can only create local users.

Is there a way to use Active Directory authentification to reduce logins ?

Thanks,

Vincent

[pwilson]

Hi,

I'm configuring RADIUS for IPSEC VPN on Netgear VPN Router.
So, on the router, I'm using XAuth with RADIUS.
On the NAS (TS-439-U-RP), I can only create local users.

Is there a way to use Active Directory authentification to reduce logins ?

Thanks,

Vincent

Your questions have nothing to do with your NAS. Please ask Microsoft or Netgear for assistance. Your inquiry is off topic.here. If you decide to use the RADIUS server on the NAS, you might want to review QNAP Tutorial: How to Use QNAP NAS as a RADIUS Server.

Discussion on using your "QNAP NAS as a RADIUS Server" would put you back "on topic". If you are determined to use Microsoft's RADIUS Server on your Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012 R2 machine, you might find Microsoft TechNet article: RADIUS Server useful.

Please take all Microsoft or Netgear discussions to a more appropriate venue.

[nolme]

Hi

I think I haven't well explained myself.

I'm using QNAP Radius Server for XAuth VPN authentification.
But I would like to know (because your link only show QNAP local RADIUS users) if there's a way to use AD users/password instead ? (my NAS is already member of an AD Domain.

Vincent

[doktornotor]

No. Why'd you do any such thing anyway? Again, use the AD/NPS/RADIUS functionality directly instead of similar completely pointless indirection.

[nolme]

Hi,

not sure to understand you answer.

the goal is to use on centralised user database authentification.
In my mind, deleting user on ActiveDirectory will disable all solutions to use Wifi, use IPSec with XAuth...

If I must maintain 2 databases, you must take in mind there is 2 entry points to delete. Making thing twice let security hole bigger.

[doktornotor]

I understand you want to use centralised user DB. So use the RADIUS server on Windows directly.

[pwilson]

I understand you want to use centralised user DB. So use the RADIUS server on Windows directly.

I already suggested that. I even provided a Microsoft URL for him to consult.

If you are determined to use Microsoft's RADIUS Server on your Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012 R2 machine, you might find Microsoft TechNet article: RADIUS Server useful.

If this thread doesn't get back on topic soon, I'll simply lock it.

[nolme]

So, if I well understand, Qnap RADIUS can't be linked to Microsoft AD accounts ?

[pwilson]

So, if I well understand, Qnap RADIUS can't be linked to Microsoft AD accounts ?

I'm sorry but I have no idea. If you have Microsoft AD, why wouldn't you use Microsoft's RADIUS service? Why do you want to decentralize this across 3 devices? Did the Microsoft TechNet article I furnished not help you?

[nolme]

In fact, today, my NAS is not SMB model so I can't set up my NAS as Domain Controller.

So if I change it, I think I will stop my server to use only the NAS with AD. So, I would prefer not to use Microsoft RADIUS service.
(and I found that QNAP Daemon and NAS stability is much better than Microsoft ;p)