FreeRADIUS is an open source RADIUS server

learn more… | top users | synonyms

1
vote
1answer
26 views

Windows cannot connect to Enterprise WPA2 WiFi access point with EAP-TTLS PAP authentication using freeradius

I was working on having an Enterprise WiFi access point where my clients need to enter username and password (which are in OpenLDAP directory), using AES, TTLS PAP. I setup my freeradius according to ...
0
votes
1answer
14 views

Cannot connect with WPA2 ((AES)) algorithm + EAP-TTLS PAP with freeradius auth

I setup successfully an enterprise wifi connection with LDAP authentication by the mediation of Freeradius. I used EAP-TTLS PAP because I have hashed passwords in my OpenLDAP directory. In case I used ...
1
vote
0answers
15 views

how to configure freeradius for separate Code and Password prompts, instead of a single Password prompt?

I've got a Freeradius server set up where the users in /etc/freeradius/users have Auth-Type := PAM. This makes radius refer to the /etc/pam.d/radiusd file, and in this file I have auth requisite ...
1
vote
0answers
11 views

Can a FreeRadius presenting a SHA1 certificate accept SHA2 client certificates and validate them against a CA that accepts SHA1 and SHA2 certificates?

Can a FreeRadius presenting a SHA1 certificate accept SHA2 client certificates and validate them against a CA that accepts SHA1 and SHA2 certificates? Another option would be that the FreeRadius ...
0
votes
1answer
44 views

FreeRadius configure two different authentication types

Have a particular scenario in that we would like to use FreeRadius to log into switchs using Kerberos credentials and network devices using EAP-TLS. Currently have this configured and working, but ...
0
votes
0answers
23 views

RADIUS + LDAP + Cisco router 1941

I have a unique setup in my data center where I have configured a Radius with LDAP for authentication and authorization in my cisco 1941 router for remote IPSEC vpn users. This works fine and dandy. ...
0
votes
0answers
59 views

Freeradius/Openldap/802.1X: PEAP-MSCHAPv2 XOR certificates

For WPA2 Enterprise I would like to have user authentication which is supported out-of-the-box by as many clients as possible (i.e., PEAP-MSCHAPv2). Furthermore, for laptops, workstations etc. I ...
0
votes
0answers
21 views

Freeradius not expanding “Calling-Station-Id” attribute in LDAP search

I'm trying to do PEAP-MSCHAPv2, then do a LDAP search to verify the user is in the correct group AND see if there MAC address is under a otherLoginWorkstation entry. If you look in the logs, ...
0
votes
0answers
24 views

Setting up chap on freeradius

I'm trying to setup CHAP authentification on our free radius server. By default, it is using PAP which for our purpose is highly inefficient. We are connecting to the server via a mikrotik router ...
0
votes
1answer
20 views

Recover active config from memory in FreeRADIUS?

I have a problem on one of my FreeRADIUS servers. I got a corrupted configfile for one of my virtual servers due to the disk going full mid-write. Normally I would just pull the file from Veeam ...
0
votes
0answers
7 views

Can I use separate configuratons per site in freeradius?

I would like to have individual configurations for each of my freeradius sites, but I don't know how to achieve this or if it's possible?
0
votes
1answer
30 views

With freeradius and PEAP-MSCHAP, how does one limit connectivity to a single group?

I feel like jumping up and down after I got FreeRadius, samba winbind, XCA w/ ECDSA certs, Active Directory, and Ubiquiti Unifi all talking together. Next problem, any valid account in ...
0
votes
0answers
38 views

Connect to freeradius with clients with dynamic IP

I have a freeradius server working. It works when I try to connect with a client defined in clients.conf (IP and shared secret is hardcoded in this file). I want to be able to connect with the ...
0
votes
1answer
68 views

radtest no response from outside localhost

I have set up freeradius in a Microsoft Azure VM. When I radtest from 127.0.0.1, it sends Access-Accept. But when I run radtest from another computer, freeradius doesn't respond. I am running ...
1
vote
1answer
33 views

Radius and FE80::/16 ignoring client

Why is my freeradius sever ignoring FE80::/16 clients? client.conf: client localhost { ipaddr = 127.0.0.1 < secret = testing123< require_message_authenticator = no nastype = ...
0
votes
0answers
61 views

How can I use winbind to return a filter-id based on group membership?

I have a couple of FreeRadius 3.0.9 servers which were just put into production on our Meraki network. We want to use user group membership in Active Directory to determine policy to be carried out by ...
0
votes
0answers
129 views

Freeradius authentication: LDAP group and SSID matching

I'm running a freeradius v3 instance with an LDAP backend for the authentication.The backend is working fine but I'v issues with my users.conf file.In this file, I'm trying to implement some rules to ...
0
votes
1answer
133 views

Debian Freeradius server and OSX EL Capitan

Using Debian Wheezy here. The last release of OSX aka "El Capitan" doesn't like our Freeradius 2.2.1 server using libssl 1.0.0 and ssl keysize of 2048 Apparently the only way to make it work is ...
1
vote
1answer
140 views

How can I configure openLDAP to lookup userPassword via FreeRadius?

I am running Ubuntu 12.04 and OpenLDAP 2.4.28-1.1ubuntu4.5. I have users populated in LDAP with userPassword attribute being an {SHA1} hash. Users are able to login over SSH and authenticate to web ...
0
votes
0answers
191 views

wpa_supplicant doesn't reach freeradius in 802.1x eap-tls wired

I want to setup a 802.1x EAP-TLS connexion with freeradius, wpa_supplicant and a Cisco Switch My network : supplicant eth0-----f1/1 SWITCH f1/0-----eth1 Freeradius the SWITCH is an emulated Switch ...
1
vote
1answer
356 views

Is there a way to make systemctl start synchronous

I'm developing/have developed a unit file for the FreeRADIUS project to integrate with systemd. [Unit] Description=FreeRADIUS multi-protocol policy server After=syslog.target network.target ...
1
vote
0answers
270 views

freeradius client send only accounting request, not access request

I have freeradius 2.2.6. Only at first connection the client send both access request and accounting request. subsequent connections sends only accouting request! This problem occurs ONLY with sone ...
0
votes
0answers
135 views

Mikrotik and freeradius, wpa2 enterpise, connection caching?

I'm not sure if connection caching is the correct term, but here are the symptoms and setup. We have a freeradius server that proxys to a windows radius server for ad auth on our wireless. All the ...
1
vote
0answers
90 views

Same VLAN for LAN only and Internet users on 802.1x network with pfSense as gateway

I am creating an ISP for a student residence. The LAN is already there and working, with several CISCO switches. I want to provide Internet by a secured and automatic way to those who pay for it ...
0
votes
1answer
43 views

Freeradius auth error message

How can I set up a message sent to the user when enters a bad credentials to WPA2-Enterprise network? I am now using Freeradius and when I enter bad password, it says nothing, but Windows throws "You ...
0
votes
0answers
85 views

OpenVPN + FreeRADIUS Authentication Error

Trying to set up a OpenVPN server with FreeRADIUS server running on the same machine. All servers are running but I'm getting errors with authentication when the end user logs on VIA OpenVPN client. ...
0
votes
1answer
237 views

Freeradius/MySQL server not responding to external calls

I'm currently building up a (CentOS 7) freeradius with MySQL(mariadb) for radius authentication. I'm able to receive auth from local host testing using radtest. Once I use NTRadPing with the same ...
1
vote
1answer
428 views

Debian Samba share Authentification with RADIUS server

I'm trying to configure Samba (apt-get install samba) to authenticate users using a RADIUS server and i cannot find anything useful. Is it possible ? I tought i could set Samba to use the PAM ...
0
votes
0answers
289 views

MultiOTP + FreeRADIUS + MS Active Directory

I am running a CentOS 6.6 64 bit Server with FreeRADIUS 2.1.12 installed from base repository. Additionally I am using MultiOTP (http://www.multiotp.net/) which is configured to connect to our Windows ...
0
votes
1answer
130 views

FreeRADIUS 3 and Wildcard Certs

I am setting up a new FreeRADIUS server here on campus, jumping from v1 to v3 (I was not here when the original was setup). Things seem to be working fine, but I do not understand how the certificates ...
0
votes
1answer
244 views

RESTful client communicating with Freeradius server [closed]

I have successfully installed the Freeradius server on Ubuntu 14.04. It is up and running perfectly with local client(from the source code downloaded from freeradius site). Now my next task is to have ...
1
vote
0answers
348 views

802.1x dynamic vlan assignment not assigning VLAN

I recently dived into 802.1x authentication with dynamic vlan assigment. My current set up contains of: - A client - A SG220 cisco switch (the supplicant) - A freeradius (authenticator) ...
1
vote
1answer
59 views

mod_auth_radius secure over https?

mod_auth_radius README file says: Using static passwords & RADIUS authentication over the web is a BAD IDEA. Everyone can sniff the passwords, as they're sent over the net in the clear. If I ...
1
vote
0answers
94 views

How to set up a simple Cisco ISG config for controlling internet access

First off, here is my config so far. http://pastebin.com/fV2NGCE2 I've gone through a few guides online and the 15.2s manual and the xe3 manual for Cisco's ISG (intelligent services gateway) and ...
0
votes
1answer
192 views

Active Directory / Freeradius / ntlm_auth / mail attribute

I am currently configuring a linux server with Freeradius to have our clients authenticate against our Active Directory for our WiFi-network. The goal is to have our users use the e-mail address that ...
0
votes
1answer
827 views

EAP-PWD with FreeRADIUS 3

I'm trying to setup EAP-PWD using FreeRADIUS 3. However, I can't get it to work and documentation is virtually non-existent. Thus, I don't know whether the problem I'm running into is a ...
0
votes
2answers
680 views

FreeRADIUS policy to restrict certain users trying to log on a specific device

What I have: freeradius 2.1.10 on debian, configured to use a database. How it works now: There are many devices on the network and users, the users log on devices to configure them and so on. The ...
1
vote
1answer
144 views

Freeradius TLS cetificate(win 7 and previous)

I'm configuring FreeRADIUS 2.2.6. I use TLS because TTLS is not supported by windows 7. With Windows 8.1 the WiFi connection works very well without installing certificate With Windows 7 and ...
0
votes
1answer
555 views

Is there a list of FreeRADIUS specific attributes?

I am using FreeRADIUS 2.1.12 with PostgreSQL for user and client (nas) auth. I'm a bit new to this--I learned what RADIUS was when I was assigned to set this server up a couple of weeks ago--so pardon ...
1
vote
2answers
339 views

Freeradius and self signed-certificate

our current wi-fi infrastructure is based on a Debian box that hosts Freeradius with LDAP backend. Currently we have two 802.1x protected SSIDs, a public and a private network: depending on an LDAP ...
0
votes
1answer
2k views

radclient:: Failed to find IP address

I installed freeradius on CentOS 6.6 and I have configured the files /etc/raddb/clients and /etc/raddb/users. I am trying to test the server by this command : radtest Aicha passme 127.0.0.1 100 ...
0
votes
1answer
88 views

Poptop configured for freeradius but still authenticates through chap

I'm running Centos 6 64 bit with Poptop and radiusclient. When I connect to my poptop server this error comes up in the error log: Feb 21 14:40:42 alpha pptpd[13225]: CTRL: Client **** control ...
0
votes
1answer
165 views

freeradius broken after apt-get update

Ubuntu 14.04.1 LTS apt-get update /upgrade was run last night at around 10pm. This morning people are saying that they can't get into ftp and wifi because these services are auth'd by freeradius. ...
0
votes
1answer
100 views

freeradius pass current virtual server port to module

I'm trying to use rlm_python to authenticate client with my backend. The problem is, it seems I could not use different modules for different virtual servers and it cause my authentication backed ...
-1
votes
1answer
118 views

Prevent internet from being monopolized by one user

In our company, there is a training room which contains 15 computers. Our employees (or external individuals) can follow a training there using these computers. However, we want to prevent the ...
1
vote
1answer
736 views

FreeRadius Accounting not working, bad passwords not cheked

I'm trying to configure a captive portal using a router with OpenWRT+ChilliSpot and an external server with Freeradius and a Web Server. ChilliSpot 1.3.0 My issue right now is that the freeradius ...
1
vote
0answers
573 views

FreeRadius Error reading /etc/freeradius/huntgroups

I've configured freeradius to use sql, everything was working fine, I was doing some tests with the users, and suddenly I cannot start the debugger because of this error : rlm_preprocess: Error ...
1
vote
3answers
289 views

Is there a way to allow all external ip connections (i.e ipv6 as well as ipv4) in FreeRadius?

I need to accept all incoming connections to the FreeRadius server be it ipv6 or ipv4. I know that we can allow all ipv4 clients with: client 0.0.0.0/0 { secret = abcde shortname = xxxx } How ...
1
vote
2answers
466 views

Cisco Aironet AP1260 can't reach FreeRADIUS server

I have a problem with a Cisco Aironet AP1260 standalone access point and a FreeRADIUS server. I'm trying to set up a 802.11x access point with authentication on a FreeRADIUS server. I have set up both ...
0
votes
0answers
125 views

EAP-TLS Passthrough from pppd to Radius?

I am setting up an IPSec+L2TP VPN for a couple of Windows boxes connecting to a Debian 7.6 (Wheezy) machine running ipsec tools and xl2tpd/pppd. Client authentication via mschapv2 works well enough; ...