Freeradius is an open source radius server

learn more… | top users | synonyms

3
votes
2answers
41 views

Centos 7. Freeradius fails to start on boot

I was messing around with FreeRADIUS and MySQL (MariaDB) and it seems FreeRADIUS service can't start properly on startup. But it starts fine using root user or in debug mode (radiusd -X) and works ...
0
votes
2answers
917 views

About radiusclient command

I have installed freeradius server 2.1.12 and freeradius client 1.1.6 on different virtual machine (redhat linux) ,and tested the server using radtest which is running . I have set up the connection ...
1
vote
0answers
24 views

FreeRadius-GoogleAuthenticator-Kerberos Password Change Weirdness

We are using FreeRadius, Kerberos and Google Authenticator to implement two-factor authentication. The two factor auth works fine, both from radtest and from a Watchguard firewall. To log in, a user ...
0
votes
0answers
10 views

Radius Users grouped by NAS Client

I have searched for many hours about the possibility of FreeRadius separate users by NAS client, but, without success :( I want to separate my users grouping by NAS client, as follow: Nas client 01 ...
1
vote
0answers
56 views

Authenticate users from Active Directory with UserPrincipalName or Mail with FreeRADIUS

According to this documentation: http://deployingradius.com/documents/configuration/active_directory.html ; FreeRADIUS can authenticate Active Directory users using Samba's ntlm_auth, and in fact it ...
3
votes
4answers
2k views

802.1x PEAP GPO that trusts self-signed CA certificate

I am working on a Freeradius backed 802.1.x authentication infrastructure for our wireless clients. I am using a rather generic Freeradius configuration with EAP-PEAP. Our clients are predominantly ...
3
votes
1answer
2k views

Configure Freeradius to check a connecting user against multiple LDAP groups

I'm setting up a Cisco ASA as a client vpn server. The appliance is relying on freeradius to authenticate the users. Freeradius has in turn been configured to query OpenLDAP. The modules/ldap file ...
0
votes
0answers
14 views

How to chroot FreeRadius

I have set up FreeRADIUS 2.1.12 on Debian for authentication in a WPA2-Enterprise environment. Now I'd like to jail it with chroot. There is a parameter in radiusd.conf configuration file pointing to ...
0
votes
1answer
48 views

Configuring a RADIUS server for 802.1x over a Cisco Switch

I am trying to set up RADIUS authentication over a Cisco switch and I have gone through every tutorial they have. I am able to get the RADIUS server to authenticate when I access the CLI of the Cisco ...
-2
votes
1answer
28 views

Freeradius Log file Information

I have installed freeradius in Ubuntu 10 LTS and i run freeradius in debugging mode as "freeradius -X" where i see the live debugging logs. Now i want to know where these logs (accept / reject) are ...
1
vote
1answer
213 views

Howto change the default radius logging path for accounting?

I have freeradius 2.1.12+dfsg-1.2 working and logging accounting packets to /var/log/freeradius/radacct/detail-20130401. However I need to tail the log and I want to ideally tail a single log file ...
0
votes
1answer
27 views

How to force JSON when using FreeRADIUS REST Module

I have compiled in JSON support to FreeRADIUS 3.0.2 however I note that if I configure authorisation to use POST it is sending RADIUS attributes encoded as application/x-www-form-urlencoded Is there ...
0
votes
1answer
27 views

Using python in FreeRADIUS

There seems to be documentation lacking on how to use the python module in FreeRADIUS. I want to use python to interpret a MAC address (in %{Calling-Station-ID}) and return an IP address. In my ...
2
votes
2answers
178 views

freeradius two factor without factor concatenation

I have a cisco router providing an SSL VPN server which is talking to freeradius, which in turn uses pam and two pam modules (sss & yubico) to provide two factor authentication for the VPN. All ...
0
votes
1answer
75 views

FreeRADIUS mschap

Following this guide, I am trying to set up FreeRADIUS to authenticate against Active Directory. I can get an Access-Accept message when I send the password in plaintext (using the DEFAULT ...
1
vote
2answers
50 views

Point of Shared Secrets on RADIUS Servers over a Cisco Switch

I was wondering what the point of Shared Secrets are on RADIUS servers if I set the secret in the Cisco switch configuration. If the supplicant wanting to be authenticated does not have to know it, ...
0
votes
1answer
68 views

FreeRADIUS Rest Module on Centos 6.x

I am attempting to add JSON support for the REST module on Centos 6.5 I have installed the json-c-devel package however when compiling FreeRADIUS it complains it can't find it: [root@dhcp01]# ...
0
votes
1answer
2k views

FreeRadius is not opening ports

I've just installed freeradius and start it with a /etc/init.d/ startup script. After I run netstat -nat I dont see that any process is listening on ports 1812 and 1813. I'm using Ubuntu 10.04 LTS ...
0
votes
1answer
33 views

RADIUS authentication requests not relayed to RADIUS server

I am trying to set up a RADIUS server for 802.1x NAC over a Cisco IE 3000 Network Switch, using freeRadius to implement it. I know the switch knows where the RADIUS server is because I set up the ...
0
votes
0answers
49 views

Can't run freeradius as a service

I have a radiusd server on a virtual machine, it's already configured and working when I issue "radiusd -X" aka debug mode. My only issue is that when I try to run it as a service it fails... Here's ...
0
votes
0answers
130 views

Cisco ASA + FreeRadius: Downloadable ACL configuration

VPN users that are using FreeRadius are having access to all VLANs. VPN users using local authentication have local ACLs applied to their access. I need to know what configuration change I need to ...
-1
votes
1answer
21 views

Syntax of mac2vlan file in freeradius?

Below is the content of mac2vlan file in freeradius. When I uncomment this line 00:01:02:03:04:05,VLAN1 it logs a parsing error including configuration file /etc/raddb/modules/mac2vlan ...
0
votes
1answer
244 views

Configuring dhcp module in FreeRadius (3.0.2 - Centos 6.5)

I am using the REST module to authorise a DHCP request. I would like to send an explicit DHCP NAK if the authorisation fails, however the DHCP module seems to return immediately if there is a failure ...
1
vote
1answer
170 views

Configuring rlm_rest module in FreeRadius

using FreeRADIUS I need to authenticate RADIUS users against a web backend and have been attempting to use the rlm_rest module to do it. See here. In my site configuration I have something like this: ...
0
votes
2answers
96 views

RADIUS-sever: Hashing password before checking

I do have to set up a RADIUS server for authentication with a captive portal of pfSense. Unfortunately, all passwords in the RADIUS' database are hashed with a certain algorithm. I do use a ...
0
votes
1answer
137 views

FreeRADIUS w/ MySQL backend. IP Pool

I have a pool of addresses (172.16.0.0/24) configured on my NAS (Cisco 2921 router) for my IPsec clients. I have various subnet mask length subnetworks used for different user groups. For example I ...
1
vote
1answer
359 views

TLS from Radius for Wifi is rejected by Win7

We do have the following Setup at our company Synology RS812+ hosting LDAP, RADIUS, DNS (Version DSM 5.0-4458 Update 2) 2*Cisco Wifi APs WAP561 (Firmware 1.0.3.4) Cisco Router ISA500 (Firmware ...
0
votes
1answer
107 views

FreeRADIUS clients to access service with username and password with access periods

I am using freeradius/mysql/daloradius. I need my customers to be able to login using a username and password that they signed up with and at the same time give them different access periods. How do ...
0
votes
0answers
77 views

EAP-TLS MSCHAPv2 Windows Server Certificate Requirements for RADIUS

I am trying to get RADIUS (freeradius) in our Network working, there are still some problems with Microsoft Supplicants which reject the certificate installed on the RADIUS Server There is a ...
2
votes
0answers
62 views

FreeRadius Server: RadGroupReply attribute for maximum connected users?

I have a FreeRadius server and I'd like to set a limitation for the number of users connected to a specific NAS. My current set up is that every user that connects to a certain NAS is added to the ...
1
vote
1answer
284 views

Write hash password to LDAP when creating a new user

I am working on a project with a central user database system. One of the requirements of the system is that there should be only one set of users for all the application. FreeRADIUS and Samba are two ...
0
votes
1answer
805 views

FreeRadius MSCHAP Authentication With Realm Fails

I have FreeRadius 2.0 server with AD as user store. Authenticating using EAP-PEAP-MSCHAP2.Local realm is defined in proxy.conf. Authentications works fine without realm added to the username. As soon ...
2
votes
1answer
3k views

Accounting setup in freeradius with mikrotik and the “always” module

I have a freeradius setup that is being used to provide authentication for users on a wireless network. The access points are all Mikrotik hardware and the users are connected 24/7. We've been ...
0
votes
0answers
63 views

OpenVPN radiusplugin for IPV6 Freeradius Server

I'm having trouble configuring radiusplugin (nongnu.org) for OpenVPN auth with Freeradius server which listen on it's IPV6 interface. Is it possible to use radiusplugin.cnf with IPv6 server address? I ...
1
vote
1answer
5k views

Cannot log into my RADIUS protected wireless connection. Here's the LOG contents

As soon as someone tries to connect to my network, this appears in the log: Tue May 3 15:58:40 2011 : Error: TLS Alert read:fatal:unknown CA Tue May 3 15:58:40 2011 : Error: TLS_accept:failed ...
3
votes
0answers
204 views

Multiple Valid Certificates in Windows 7 breaking Wired 802.1x Deployment

I have a Wired 802.1x deployment using TLS machine authentication on Windows 7 (built-in 802.1x supplicant) with the necessary certs (FreeRadius v2.2.3 generated on Linux). Cisco C2960 POE switch is ...
1
vote
2answers
329 views

Freeradius: Assign Group to User based on Nas-IP-Address

I wonder if anyone can help me. The goal is to assign different users different ip address based on the AP they connect to. I cannot statically set this as users will travel and end up connecting ...
0
votes
1answer
208 views

Authentication to Squid proxy with a RADIUS-authenticated client

I want to set up a wireless environment where WPA2-Enterprise is used for authentication to a FreeRADIUS server (using EAP-TTLS or PEAP), and the wireless client is seamlessly routed through and ...
0
votes
1answer
261 views

Authenticate Radius user using pam and ssh [duplicate]

I am able to authenticate radius users using radius server+pam+ssh with creating local user with blank password in linux. Is it possible to authenticate radius users without creating users in local ...
0
votes
0answers
10 views

FreeRadius with login RTypical security Option

I dont want to use FreeRadius what CHAP, MS CHAP , PAP login method i just want to use the following picture login security what is the security method name? and how to apply in FreeRadius ?
0
votes
0answers
140 views

Window CLient User Connect PPTP VPN FreeRadius verify username from MySQL not chap-secrets file

FreeRadius are working proper Sending Access-Request of id 223 to 110.4.43.172 port 1812 User-Name = "test" User-Password = "mypassword" NAS-IP-Address = 127.0.0.1 ...
5
votes
2answers
2k views

FreeRADIUS2 and LDAP Authentication

I am currently running a CentOS 5.5 box with FreeRADIUS2 on it. I have the simple authentication turned on right now (username and pass is set via /etc/raddb/users). I want to have FreeRADIUS ...
1
vote
1answer
205 views

l2tp/pptp + freeradius (accounting information only gets updated on disconnect)

I have a basic PPTP/L2TP setup that uses a remote freeradius server with mysql. Issue is that when a user gets connected to the vpn and as long as the user stays connected (could be hours), no ...
2
votes
2answers
459 views

Meraki's Accounting-Requests to RADIUS server

I'm running a RADIUS server with some Meraki APs, the process of Authentications is fine... But it seems that the Meraki Cloud Controller is just sending the authentication packets and not the ...
0
votes
1answer
258 views

Freeradius server is not accepting accounting packets through tcpreplay

I am running a free radius server on system A. I am sending test accounting requests using radclient radclient -x systemA acct testing123 from system B. I can see that the radius server recieved these ...
0
votes
1answer
454 views

coovachilli + freeradius, how to check how many users are currently login?

I installed CoovaChilli (AC) + freeradius in Ubuntu 10.10 successfully. How could I check how many user has already login and still remain active ?
6
votes
1answer
266 views

Need help understanding PAM directives

I have the following directives in my /etc/pam.d/sshd file on a RHEL5 box and I'm a bit confused. These directives are there to make LDAP+RADIUS+OTP work. What I'm trying to do is tell pam not to ...
0
votes
1answer
153 views

Freeradius my custom module to set Framed-IP-Address

I got a complicated schema where my radius server needs to send the Framed-IP-Address based on the results of a redis-db query so, I would like to know if if the post-auth part of my default config ...
1
vote
2answers
590 views

How to limit user's access to a specific NAS?

I'm new to RADIUS and I have just set up a very basic FreeRADIUS server for 802.1x (WPA). I use EAP, MySQL as backend with daloRADIUS as webGUI (for user management, mainly). I got two WiFi networks, ...
9
votes
1answer
1k views

Configuring WPA2-Enterprise with Freeradius

I'm trying to set up an authenticated wifi network with Freeradius. I've managed to get things working using self-signed certs etc. The problem is Windows clients need to uncheck the "Automatically ...