Freeradius is an open source radius server

learn more… | top users | synonyms

0
votes
0answers
30 views

wpa_supplicant doesn't reach freeradius in 802.1x eap-tls wired

I want to setup a 802.1x EAP-TLS connexion with freeradius, wpa_supplicant and a Cisco Switch My network : supplicant eth0-----f1/1 SWITCH f1/0-----eth1 Freeradius the SWITCH is an emulated Switch ...
1
vote
1answer
46 views

Is there a way to make systemctl start synchronous

I'm developing/have developed a unit file for the FreeRADIUS project to integrate with systemd. [Unit] Description=FreeRADIUS multi-protocol policy server After=syslog.target network.target ...
1
vote
0answers
46 views

freeradius client send only accounting request, not access request

I have freeradius 2.2.6. Only at first connection the client send both access request and accounting request. subsequent connections sends only accouting request! This problem occurs ONLY with sone ...
0
votes
0answers
28 views

Mikrotik and freeradius, wpa2 enterpise, connection caching?

I'm not sure if connection caching is the correct term, but here are the symptoms and setup. We have a freeradius server that proxys to a windows radius server for ad auth on our wireless. All the ...
1
vote
0answers
48 views

Same VLAN for LAN only and Internet users on 802.1x network with pfSense as gateway

I am creating an ISP for a student residence. The LAN is already there and working, with several CISCO switches. I want to provide Internet by a secured and automatic way to those who pay for it ...
0
votes
1answer
28 views

Freeradius auth error message

How can I set up a message sent to the user when enters a bad credentials to WPA2-Enterprise network? I am now using Freeradius and when I enter bad password, it says nothing, but Windows throws "You ...
0
votes
0answers
37 views

OpenVPN + FreeRADIUS Authentication Error

Trying to set up a OpenVPN server with FreeRADIUS server running on the same machine. All servers are running but I'm getting errors with authentication when the end user logs on VIA OpenVPN client. ...
0
votes
1answer
96 views

Freeradius/MySQL server not responding to external calls

I'm currently building up a (CentOS 7) freeradius with MySQL(mariadb) for radius authentication. I'm able to receive auth from local host testing using radtest. Once I use NTRadPing with the same ...
1
vote
1answer
175 views

Debian Samba share Authentification with RADIUS server

I'm trying to configure Samba (apt-get install samba) to authenticate users using a RADIUS server and i cannot find anything useful. Is it possible ? I tought i could set Samba to use the PAM ...
0
votes
0answers
102 views

MultiOTP + FreeRADIUS + MS Active Directory

I am running a CentOS 6.6 64 bit Server with FreeRADIUS 2.1.12 installed from base repository. Additionally I am using MultiOTP (http://www.multiotp.net/) which is configured to connect to our Windows ...
0
votes
1answer
58 views

FreeRADIUS 3 and Wildcard Certs

I am setting up a new FreeRADIUS server here on campus, jumping from v1 to v3 (I was not here when the original was setup). Things seem to be working fine, but I do not understand how the certificates ...
0
votes
1answer
98 views

RESTful client communicating with Freeradius server [closed]

I have successfully installed the Freeradius server on Ubuntu 14.04. It is up and running perfectly with local client(from the source code downloaded from freeradius site). Now my next task is to have ...
1
vote
0answers
180 views

802.1x dynamic vlan assignment not assigning VLAN

I recently dived into 802.1x authentication with dynamic vlan assigment. My current set up contains of: - A client - A SG220 cisco switch (the supplicant) - A freeradius (authenticator) ...
1
vote
1answer
32 views

mod_auth_radius secure over https?

mod_auth_radius README file says: Using static passwords & RADIUS authentication over the web is a BAD IDEA. Everyone can sniff the passwords, as they're sent over the net in the clear. If I ...
1
vote
0answers
52 views

How to set up a simple Cisco ISG config for controlling internet access

First off, here is my config so far. http://pastebin.com/fV2NGCE2 I've gone through a few guides online and the 15.2s manual and the xe3 manual for Cisco's ISG (intelligent services gateway) and ...
0
votes
1answer
108 views

Active Directory / Freeradius / ntlm_auth / mail attribute

I am currently configuring a linux server with Freeradius to have our clients authenticate against our Active Directory for our WiFi-network. The goal is to have our users use the e-mail address that ...
0
votes
1answer
325 views

EAP-PWD with FreeRADIUS 3

I'm trying to setup EAP-PWD using FreeRADIUS 3. However, I can't get it to work and documentation is virtually non-existent. Thus, I don't know whether the problem I'm running into is a ...
0
votes
2answers
261 views

FreeRADIUS policy to restrict certain users trying to log on a specific device

What I have: freeradius 2.1.10 on debian, configured to use a database. How it works now: There are many devices on the network and users, the users log on devices to configure them and so on. The ...
1
vote
1answer
84 views

Freeradius TLS cetificate(win 7 and previous)

I'm configuring FreeRADIUS 2.2.6. I use TLS because TTLS is not supported by windows 7. With Windows 8.1 the WiFi connection works very well without installing certificate With Windows 7 and ...
0
votes
1answer
199 views

Is there a list of FreeRADIUS specific attributes?

I am using FreeRADIUS 2.1.12 with PostgreSQL for user and client (nas) auth. I'm a bit new to this--I learned what RADIUS was when I was assigned to set this server up a couple of weeks ago--so pardon ...
1
vote
2answers
160 views

Freeradius and self signed-certificate

our current wi-fi infrastructure is based on a Debian box that hosts Freeradius with LDAP backend. Currently we have two 802.1x protected SSIDs, a public and a private network: depending on an LDAP ...
0
votes
1answer
970 views

radclient:: Failed to find IP address

I installed freeradius on CentOS 6.6 and I have configured the files /etc/raddb/clients and /etc/raddb/users. I am trying to test the server by this command : radtest Aicha passme 127.0.0.1 100 ...
0
votes
0answers
51 views

Poptop configured for freeradius but still authenticates through chap

I'm running Centos 6 64 bit with Poptop and radiusclient. When I connect to my poptop server this error comes up in the error log: Feb 21 14:40:42 alpha pptpd[13225]: CTRL: Client **** control ...
0
votes
1answer
130 views

freeradius broken after apt-get update

Ubuntu 14.04.1 LTS apt-get update /upgrade was run last night at around 10pm. This morning people are saying that they can't get into ftp and wifi because these services are auth'd by freeradius. ...
0
votes
1answer
64 views

freeradius pass current virtual server port to module

I'm trying to use rlm_python to authenticate client with my backend. The problem is, it seems I could not use different modules for different virtual servers and it cause my authentication backed ...
-1
votes
1answer
96 views

Prevent internet from being monopolized by one user

In our company, there is a training room which contains 15 computers. Our employees (or external individuals) can follow a training there using these computers. However, we want to prevent the ...
1
vote
1answer
498 views

FreeRadius Accounting not working, bad passwords not cheked

I'm trying to configure a captive portal using a router with OpenWRT+ChilliSpot and an external server with Freeradius and a Web Server. ChilliSpot 1.3.0 My issue right now is that the freeradius ...
1
vote
0answers
352 views

FreeRadius Error reading /etc/freeradius/huntgroups

I've configured freeradius to use sql, everything was working fine, I was doing some tests with the users, and suddenly I cannot start the debugger because of this error : rlm_preprocess: Error ...
0
votes
0answers
60 views

Reject Users by NAS on freeradius

Simple ('users') freeradius setup for wireless access (PEAP-mschapv2 as default on NAS1, plus EAP-TLS) and VPN (PPP-mschapv2 on NAS2). VPN users should not be able to gain wireless access on NAS1 and ...
1
vote
3answers
153 views

Is there a way to allow all external ip connections (i.e ipv6 as well as ipv4) in FreeRadius?

I need to accept all incoming connections to the FreeRadius server be it ipv6 or ipv4. I know that we can allow all ipv4 clients with: client 0.0.0.0/0 { secret = abcde shortname = xxxx } How ...
1
vote
2answers
314 views

Cisco Aironet AP1260 can't reach FreeRADIUS server

I have a problem with a Cisco Aironet AP1260 standalone access point and a FreeRADIUS server. I'm trying to set up a 802.11x access point with authentication on a FreeRADIUS server. I have set up both ...
0
votes
0answers
91 views

EAP-TLS Passthrough from pppd to Radius?

I am setting up an IPSec+L2TP VPN for a couple of Windows boxes connecting to a Debian 7.6 (Wheezy) machine running ipsec tools and xl2tpd/pppd. Client authentication via mschapv2 works well enough; ...
2
votes
0answers
382 views

FreeRADIUS using Active Directory integration broken without any traces

I've a FreeBSD 10.0 server running FreeRADIUS 3 and things got broken without any apparent reason. I'm using Winbind from Samba4 to authenticate with ntlm_auth. I've done some debug to solve the ...
0
votes
0answers
83 views

OpenVPN Radiusplugin AD and the user restriction

Im using FreeRadius which is using Samba4 (AD DC) as the user/password provider. OpenVPN is using Radiusplugin, which use that FreeRadius Server for authentication. This solution work great, but I ...
-1
votes
1answer
398 views

FreeRADIUS certificate is going to expired

Recently I've created a RADIUS server (Freeradius) that authenticate with Active Directory. I follow this link to create this server: Now, when I see the "server.cnf" file into /etc/raddb/cert , I ...
1
vote
1answer
767 views

FreeRADIUS and Redis Module

I am wanting to use FreeRADIUS with REDIS for authorisation and accounting. I am running FreeRADIUS 3.0.3. I note the rlm_rediswho module, which appears to be used for caching recent accounting ...
3
votes
2answers
4k views

Centos 7. Freeradius fails to start on boot due to priority

I was messing around with FreeRADIUS and MySQL (MariaDB) and it seems FreeRADIUS service can't start properly on startup. But it starts fine using root user or in debug mode (radiusd -X) and works ...
1
vote
0answers
157 views

FreeRadius-GoogleAuthenticator-Kerberos Password Change Weirdness

We are using FreeRadius, Kerberos and Google Authenticator to implement two-factor authentication. The two factor auth works fine, both from radtest and from a Watchguard firewall. To log in, a user ...
1
vote
0answers
2k views

Authenticate users from Active Directory with UserPrincipalName or Mail with FreeRADIUS

According to this documentation: http://deployingradius.com/documents/configuration/active_directory.html ; FreeRADIUS can authenticate Active Directory users using Samba's ntlm_auth, and in fact it ...
0
votes
1answer
89 views

How to chroot FreeRadius

I have set up FreeRADIUS 2.1.12 on Debian for authentication in a WPA2-Enterprise environment. Now I'd like to jail it with chroot. There is a parameter in radiusd.conf configuration file pointing to ...
-2
votes
1answer
933 views

Freeradius Log file Information

I have installed freeradius in Ubuntu 10 LTS and i run freeradius in debugging mode as "freeradius -X" where i see the live debugging logs. Now i want to know where these logs (accept / reject) are ...
0
votes
1answer
189 views

How to force JSON when using FreeRADIUS REST Module

I have compiled in JSON support to FreeRADIUS 3.0.2 however I note that if I configure authorisation to use POST it is sending RADIUS attributes encoded as application/x-www-form-urlencoded Is there ...
0
votes
1answer
961 views

Using python in FreeRADIUS

There seems to be documentation lacking on how to use the python module in FreeRADIUS. I want to use python to interpret a MAC address (in %{Calling-Station-ID}) and return an IP address. In my ...
1
vote
2answers
235 views

Point of Shared Secrets on RADIUS Servers over a Cisco Switch

I was wondering what the point of Shared Secrets are on RADIUS servers if I set the secret in the Cisco switch configuration. If the supplicant wanting to be authenticated does not have to know it, ...
0
votes
1answer
285 views

FreeRADIUS Rest Module on Centos 6.x

I am attempting to add JSON support for the REST module on Centos 6.5 I have installed the json-c-devel package however when compiling FreeRADIUS it complains it can't find it: [root@dhcp01]# ...
1
vote
0answers
361 views

Can't run freeradius as a service

I have a radiusd server on a virtual machine, it's already configured and working when I issue "radiusd -X" aka debug mode. My only issue is that when I try to run it as a service it fails... Here's ...
0
votes
1answer
1k views

FreeRADIUS mschap

Following this guide, I am trying to set up FreeRADIUS to authenticate against Active Directory. I can get an Access-Accept message when I send the password in plaintext (using the DEFAULT ...
0
votes
1answer
105 views

RADIUS authentication requests not relayed to RADIUS server

I am trying to set up a RADIUS server for 802.1x NAC over a Cisco IE 3000 Network Switch, using freeRadius to implement it. I know the switch knows where the RADIUS server is because I set up the ...
0
votes
1answer
644 views

Configuring a RADIUS server for 802.1x over a Cisco Switch

I am trying to set up RADIUS authentication over a Cisco switch and I have gone through every tutorial they have. I am able to get the RADIUS server to authenticate when I access the CLI of the Cisco ...
-1
votes
2answers
125 views

Syntax of mac2vlan file in freeradius?

Below is the content of mac2vlan file in freeradius. When I uncomment this line 00:01:02:03:04:05,VLAN1 it logs a parsing error including configuration file /etc/raddb/modules/mac2vlan ...