Yubico Forum

Hej,

I work for a compagny and we would like to deploy yubikeys. Currently i'm stuck in the freeRadius module in YubiX.If i understand it well in the documentation, yubiAuth is working only with a final DN.

We have different OU and CN for many users and it's not convenient to change the dn each time we want to perform authentifcation for users in different DN.

for e.g :

CN=USR1},CN=Users,DC=XXX,DC=YYY,DC=ZZZ
CN=USR2,CN=Poeple,DC=XXX,DC=YYY,DC=ZZZ

I've got few questions :

1) Does someone successfully patch the yubiAUTH (or the FreeRadius in yubix) to be able to handle with recursive request in AD ?
2) Its is possible to do Ldaps and use a ldap reader account ?

Thank you,

I finally found a solution for authenticate all the users of my domain,

I set DN = {user.name}@MYDOMAIN.COM and it's working.