[Openswan Users] Openswan / L2TP Authentication with M$ Active-Directory?

[Randy B]

Randy B wrote:
>>I this possibly?
> 
> 
> Certainly is; the most common method I've seen is to use l2tpns (which
> requires RADIUS) as your l2tp backend.  You can then use either existing
> RADIUS servers that are off of your Active Directory, or you can use
> freeradius to connect to fulfill that purpose.
> 
> RB
> _______________________________________________
> Users mailing list
> Users at openswan.org
> http://lists.openswan.org/mailman/listinfo/users
> 
> 
l2tpns does add the complexity that it requires a RADIUS server, whereas
using PAM auth may not; it's up to you - the reason I like l2tpns (and
others seem to as well) is because it takes away the additional
complexity of having to use pppd - l2tpns does the whole PPP conversation.