Freeradius version 2

learn more… | top users | synonyms

8
votes
2answers
347 views

FreeRADIUS 2 should use a different Python than default

We've got a FreeRADIUS 2 deamon installed on a CentOS 5.7 server. We'd like to use a pre-written Python module to do authorization but there's a problem: The Python module we've got requires Python ...
5
votes
2answers
2k views

FreeRADIUS2 and LDAP Authentication

I am currently running a CentOS 5.5 box with FreeRADIUS2 on it. I have the simple authentication turned on right now (username and pass is set via /etc/raddb/users). I want to have FreeRADIUS ...
3
votes
1answer
1k views

Radius Certificate Based (eap) Authentication

We are currently putting in place a freeradius server that uses certificates to authenticate via a wireless connection. We have this working for 802.1x but Novell's client for Windows 7 breaks the ...
2
votes
2answers
1k views

Restrict FreeRADIUS clients to access service from different LANs with same user and password

I have FreeRADIUS installed on my server, and also have two LANs (or may be more) managed by this server. Let's say LAN A:192.168.1.0, and LAN B: 192.168.2.0. I'm using FreeRADIUS in combination with ...
2
votes
1answer
1k views

How to use Calling-Station-Id on a per user basis in freeRADIUS?

I am trying to limit every user to a small set of Mac-IDs in RADIUS, by directly including the appropriate information in the users file. It would be acceptable even if every user was limited to one ...
1
vote
2answers
2k views

Redundant FreeRADIUS + MySQL

I’m working on some web service having it’s AAA implemented by FreeRADIUS + MySQL on Debian. The problem I’m working right now is HA & scalability of RADIUS. If the FreeRADIUS machine or MySQL ...
1
vote
1answer
638 views

Reload Freeradius clients without restart the service

Is there a way to reload the Freeradius clients configuration without restarting the service? I'm using: Ubuntu Server 12 Freeradius 2.1.10 MySQL v5.5.20 (I'm storing the clients in the "nas" table) ...
1
vote
2answers
4k views

Freeradius authentication failed for unknown reason

I followed this instruction to force freeradius to use mysql database. and run freeradius in debug mod. but it rejects all authentication. mysql database : mysql> select * from radcheck; ...
1
vote
1answer
657 views

Can freeradius bypass authentication for one realm only?

I have a question similar to this one, but without the VLAN complications. How can(?) I configure FreeRadius 1.x to allow any combination of username/password for one realm only? If FreeRadius 1.x ...
1
vote
1answer
1k views

Using SHA1 user password fields in freeradius radius server

I have proprietary web application which stores user password in form of sha1$79b2c$b3704ec5703ef28ded379cf6c6de4c4160aa029b. This is a salted sha1 hash. I want to use this presaved information for ...
1
vote
1answer
2k views

FreeRADIUS Authentication Fails

I'm using an SQL database of accounts for FreeRADIUS to authenticate against. I'm managing these accounts using the default Dialup Admin interface. I have created a test user - testing123 and given it ...
1
vote
1answer
254 views

FreeRADIUS Default Answer

We are using FreeRADIUS with a MySQL database, authenticating users. We ran into an issue where are MySQL database was slow causing the max number of threads to be reached. The issue with this is, ...
0
votes
1answer
705 views

Monitor freeradius for failed login attempts and trigger email to user

We have 2 freeradius authentication servers which service around 12k users. Users often enter incorrect credentials and this causes significant strain on the helpdesk. I'd like to write a script to ...
0
votes
1answer
12k views

How to configure FreeRadius to accept all authentication requests?

I'm attempting to configure FreeRadius to work with Dynamic VLAN Assignment. What I'm attempting to do, is return a specific VLAN ID for known hosts, but return a default VLAN ID for unknown hosts. ...
0
votes
1answer
411 views

Multiple NAS-IP-Address check attributes in FreeRadius?

is it possible to have an OR statement in freeradius check attributes? I have say 10 VPN servers that authenticate from freeradius. Most users can access all servers but I have a demo user that can ...
0
votes
1answer
928 views

Mpd as pppoe server with authorisation by freeradius2

I install freeradius2, add to raddb/users: test Cleartext-Password := "test1" Service-Type = Framed-User, Framed-Protocol = PPP, Framed-IP-Address = 10.36.0.2, Framed-IP-Netmask = ...
0
votes
1answer
1k views

Freeradius on Linux with dynamic VLAN assignment via AD

I've been trying to configure my freeradius server on Linux to authenticate users from an existing Active Directory (windows server 2003) and i've already done that. Now i need to assign VLANs to ...
0
votes
1answer
165 views

Will RADIUS allow me to have authentication from an SBS domain in a 2003 domain?

I'm no RADIUS expert. But my understanding is that RADIUS can use Active Directory as a 'realm' to authenticate. This got me thinking - We have 3 separate clients in one building, and we manage the ...
0
votes
3answers
5k views

openVPN disconnect via command line in linux

Is there a way to disconnect an openvpn connection that was established by free-radius with a shell command line? I have all information about the openvpn connection: Username Client IP ...
0
votes
0answers
32 views

Setting variable depending on NAS-IP-Address in Freeradius

The setup We currently have a Freeradius server used to authenticate our Wifi users against our Active Directory server. The link between Freeradius and the Active Directory is done by Winbind. In ...
0
votes
1answer
132 views

“Certificate not trusted error” for eap-tls

I'm setting up freeradius as the authentication server for 802.1x. While testing the config using rad_eap_test, the server returns the following error: [tls] <<< TLS 1.0 Handshake [length ...
0
votes
0answers
54 views

Exchange Server 2013 and RADIUS server(freeRADIUS2)

I am a student and doing an internship. I have to test Microsoft Exchange Server 2013. I am using Windows Server 2012, I already installed Exchange Server 2013 on it and everything works as intended. ...
0
votes
1answer
1k views

How to accept all connections in freeradius2?

I need to setup radius that accept any username/password and give some attrs for mpd. Something like: (raddb/users) DEFAULT Framed-Protocol == PPP ...
0
votes
0answers
854 views

Freeradius - How to disable 'detail' accounting logs

A customers AAA server is generating massive accouting detail log files which are causing disk space issues. Since they are logging accounting data to sql, we would like to disable these detail files. ...
0
votes
1answer
265 views

freeradius authenticate over ldap log files

when config free-radius to authenticate over ldap where are the log files that store usernames and other connected client info? excuse me for my bad English.
0
votes
1answer
1k views

pam_auth_radius - RADIUS users vs unix users

I have recently set up a server with FreeRADIUS to authenticate and keep track of admin logins on some of my devices. I'm looking at getting my Linux and FreeBSD machines authenticating against ...
0
votes
2answers
430 views

freeradius maximum session time problem

hello I'm using openvpn and free-radius for control user accounts. for maximum session time for an user, free-radius has sqlcounter.conf that control that, but after a connection has disconnected that ...