Admin Authentication

[HANDLEric]

Hello,

Is it possible to configure admin authentication via an external provider (IE: ActiveDirectory or LDAP)?

 

[anodos]

Not for the freenas webui. If you're primarily administering SMB shares (viewing open files, manipulating share ACLs, etc), then you can do it through the "Computer Management" mmc snapin on a Windows server. If there's strong interest among users, I can expand what's possible through the MMC snap-in to allow share / dataset creation.

 

[diedrichg]

Slated for v12.0:
Add Google Authenticator PAM module to FreeNAS for 2-factor login authentication
https://jira.ixsystems.com/browse/NAS-100123

 

[Heracles]

As of now, I am using HAProxy to do client-side SSL authentication before letting anything reach FreeNAS' WebUI. Thanks to that, I can create or revoke certificates easily, granting / removing access as I need. It is also 100% transparent to FreeNAS and does not require anything special outside.

 

[HANDLEric]

Yea, my goal would to not be managing local credentials on the FreeNAS server, rather to just add necessary users to an admin group in active directory and be using those credentials rather than trying to remember a separate account.