FreeRADIUS is an open source RADIUS server

learn more… | top users | synonyms

0
votes
0answers
7 views

AddRadiusCookieValid and AuthRadiusCookieValid in Apache Radius module

For one of my projects I have to set up two factor authentication. I have used Apache Free Radius module which acts as a client to Radius server. This setup is already been done and 2FA is working ...
0
votes
0answers
19 views

freeradius+ external users database

I need authenticate users with freeradius, these users are located in an existing external database. I think that the rest_module can help me to do that, in that case, which values the rest api ...
2
votes
1answer
3k views

Configuring rlm_rest module in FreeRadius

using FreeRADIUS I need to authenticate RADIUS users against a web backend and have been attempting to use the rlm_rest module to do it. See here. In my site configuration I have something like this: ...
0
votes
0answers
32 views

FreeRadius: No User-Password or CHAP-Password attribute in the request

I've create a VPN Server(PPTP + FreeRadius2.1.12) on Ubuntu, the radtest command was succeed,but on OSX use pptp to login the VPN is not. Here's the configuration. Server: Ubuntu Client: OSX ...
0
votes
1answer
1k views

Freeradius server is not accepting accounting packets through tcpreplay

I am running a free radius server on system A. I am sending test accounting requests using radclient radclient -x systemA acct testing123 from system B. I can see that the radius server recieved these ...
0
votes
1answer
16 views

Packet don't flow over Cisco VPDN (PPP) when using RADIUS

I've extensively searched for everything I can think of regarding this subject online - I hope I'm just missing the obvious. This has been bugging me every evening for 2 weeks now. (It's a Cisco ...
0
votes
1answer
35 views

Freeradius / python / package import fail

I'am tring to import an external library into (PyJWT) for a freeradius authorization, but when i run freeradius -X i get this error message. # Instantiating module "python" from file /etc/...
0
votes
1answer
159 views

Debian Freeradius server and OSX EL Capitan

Using Debian Wheezy here. The last release of OSX aka "El Capitan" doesn't like our Freeradius 2.2.1 server using libssl 1.0.0 and ssl keysize of 2048 Apparently the only way to make it work is ...
2
votes
2answers
3k views

TLS from Radius for Wifi is rejected by Win7

We do have the following Setup at our company Synology RS812+ hosting LDAP, RADIUS, DNS (Version DSM 5.0-4458 Update 2) 2*Cisco Wifi APs WAP561 (Firmware 1.0.3.4) Cisco Router ISA500 (Firmware 1.2....
0
votes
0answers
18 views

Roaming Issue with FreeRadius

I am using a FreeRadius Server (running on Centos 6.8) with CloudTrax (OpenMesh r5xx). When people try to roam between Access Points, they get logged off. Are there some settings in FreeRadius I ...
0
votes
1answer
52 views

How to import large mysql database (innodb , myisam tables) to MySQL NDB cluster

Mysqlcluster used:- GA 7.4, Centos 7 I have 30GB each physical memory in 2 datanodes and SSD 200GB each but the database size(cumulative size of multiple db's belonging to free radius ) is around ...
0
votes
0answers
16 views

Checking RadHuntGroup And Radgroupcheck to login specific NAS

I am actually setting up a FreeRADIUS Version 2.1.12, server that will manage authentication Users Cisco Switchs in company .. and i have one problem : I need to create some accounts that can be ...
0
votes
0answers
66 views

freeRADIUS TLS Alert read:fatal:unknown CA

I am trying to implement Hotspot 2.0 / Passpoint feature using the following: FreeRADIUS v3.0.11 Google Nexus 6P device running Marshmallow 6.0 OS Cisco Wireless LAN ( WLC Controller ) with 3702 AP. ...
2
votes
1answer
68 views

SSH fallback to local acount if Radius server isnt available

Ive edited my /etc/pam.d/sshd for radius authentication, i added this line auth required pam_radius_auth.so Also ive commented out the line: @include common-auth Now SSH authentication using ...
0
votes
0answers
16 views

Implement zone migration on nomadix

I am trying to implement zone migration on nomadix. I have made the desired settings on the nomadix. However when I switch between the SSIDs it does not redirect me to the AAA page. Although I get ...
0
votes
0answers
46 views

authenticating Cisco IOS against FreeRADIUS not responding

My company's looking to move from local authentication on it's routers and switches to a central RADIUS server which I have been tasked with developing. I have the FreeRADIUS server properly ...
2
votes
1answer
563 views

FreeRADIUS using Active Directory integration broken without any traces

I've a FreeBSD 10.0 server running FreeRADIUS 3 and things got broken without any apparent reason. I'm using Winbind from Samba4 to authenticate with ntlm_auth. I've done some debug to solve the ...
0
votes
1answer
22 views

Freeradius Server Migration

Good Afternoon. I have a working freeradius 2.1.1 server installed in Debian 5.0 and IO would like to migrate it to a fereradius 3.0.11 installed on Ubuntu Server 14.04 LTS. My question would be , ...
1
vote
1answer
1k views

Cisco 3750 switch wont transmit radius request to server

We have a radius server running on our lan and i am able to authenticate against it through direct link to the server. However when we want our clients to connect through our switch (cisco 3750 ...
0
votes
0answers
95 views

accounting in rlm_rest Module freeradius

I work on a Hotspot Project with Coova Chilli and Freeradius. I Use FreeRADIUS in the latest stable Version 3.0.11. I created my rest and sites-enabled config file according to this post: Configuring ...
0
votes
1answer
83 views

FreeRadius Scalability with multiple NAS worldwide

Our network setup consists of 5 network access servers in 5 different locations worldwide and it is expected to expand in the coming days to 15 network access servers and more in future. Currently we ...
0
votes
2answers
61 views

Freeradius is ignoring Packets

currently i'm installing a Cisco ASR1k as an PPPoE BRAS. I'm using freeradius as authentication service. The setup is an Ubuntu 14.04LTS with a quite outdated freeradius 2.1.12 installed via APT. ...
0
votes
0answers
19 views

Why do i need freeradius's keytab?

I'm trying to set up 802.1x for the wifi. I'm working with freeradius an windows server 2012. I need SSO ... help :) Currently I'm not able to set up freeradius krb. 'radtest' doesn't make it trough. ...
0
votes
1answer
835 views

freeradius address assignment from ippool

I'm trying to figure out how to assign IP addresses from an ippool to mobile units. Ideally, I would like a unit to receive the same IP at each request. There is no data source to use to populate ...
0
votes
2answers
496 views

MultiOTP + FreeRADIUS + MS Active Directory

I am running a CentOS 6.6 64 bit Server with FreeRADIUS 2.1.12 installed from base repository. Additionally I am using MultiOTP (http://www.multiotp.net/) which is configured to connect to our Windows ...
1
vote
0answers
100 views

MS Active Directory with Google Authenticator

I am currently designing our new internal IT services, including IAM and e-mail. We currently use more or less no IAM or single sign-on solution. We have a WordPress based website, postfix + dovecot ...
0
votes
0answers
15 views

How to check if the request is coming from nomadix using called station id

I want to do the following on the radius server :- Do an if statement to determine if we're dealing with a Nomadix using the %{Called-Station-Id} and if yes then need to execute a select query on a ...
0
votes
1answer
128 views

FreeRadius configure two different authentication types

Have a particular scenario in that we would like to use FreeRadius to log into switchs using Kerberos credentials and network devices using EAP-TLS. Currently have this configured and working, but ...
0
votes
1answer
42 views

Cannot connect with WPA2 ((AES)) algorithm + EAP-TTLS PAP with freeradius auth

I setup successfully an enterprise wifi connection with LDAP authentication by the mediation of Freeradius. I used EAP-TTLS PAP because I have hashed passwords in my OpenLDAP directory. In case I used ...
1
vote
1answer
108 views

Windows cannot connect to Enterprise WPA2 WiFi access point with EAP-TTLS PAP authentication using freeradius

I was working on having an Enterprise WiFi access point where my clients need to enter username and password (which are in OpenLDAP directory), using AES, TTLS PAP. I setup my freeradius according to ...
1
vote
0answers
29 views

how to configure freeradius for separate Code and Password prompts, instead of a single Password prompt?

I've got a Freeradius server set up where the users in /etc/freeradius/users have Auth-Type := PAM. This makes radius refer to the /etc/pam.d/radiusd file, and in this file I have auth requisite ...
1
vote
0answers
22 views

Can a FreeRadius presenting a SHA1 certificate accept SHA2 client certificates and validate them against a CA that accepts SHA1 and SHA2 certificates?

Can a FreeRadius presenting a SHA1 certificate accept SHA2 client certificates and validate them against a CA that accepts SHA1 and SHA2 certificates? Another option would be that the FreeRadius ...
0
votes
0answers
41 views

RADIUS + LDAP + Cisco router 1941

I have a unique setup in my data center where I have configured a Radius with LDAP for authentication and authorization in my cisco 1941 router for remote IPSEC vpn users. This works fine and dandy. ...
0
votes
0answers
237 views

Freeradius/Openldap/802.1X: PEAP-MSCHAPv2 XOR certificates

For WPA2 Enterprise I would like to have user authentication which is supported out-of-the-box by as many clients as possible (i.e., PEAP-MSCHAPv2). Furthermore, for laptops, workstations etc. I ...
0
votes
0answers
110 views

Freeradius not expanding “Calling-Station-Id” attribute in LDAP search

I'm trying to do PEAP-MSCHAPv2, then do a LDAP search to verify the user is in the correct group AND see if there MAC address is under a otherLoginWorkstation entry. If you look in the logs, ...
0
votes
0answers
52 views

Setting up chap on freeradius

I'm trying to setup CHAP authentification on our free radius server. By default, it is using PAP which for our purpose is highly inefficient. We are connecting to the server via a mikrotik router ...
0
votes
1answer
25 views

Recover active config from memory in FreeRADIUS?

I have a problem on one of my FreeRADIUS servers. I got a corrupted configfile for one of my virtual servers due to the disk going full mid-write. Normally I would just pull the file from Veeam backup,...
0
votes
0answers
10 views

Can I use separate configuratons per site in freeradius?

I would like to have individual configurations for each of my freeradius sites, but I don't know how to achieve this or if it's possible?
0
votes
1answer
90 views

With freeradius and PEAP-MSCHAP, how does one limit connectivity to a single group?

I feel like jumping up and down after I got FreeRadius, samba winbind, XCA w/ ECDSA certs, Active Directory, and Ubiquiti Unifi all talking together. Next problem, any valid account in ...
0
votes
0answers
105 views

Connect to freeradius with clients with dynamic IP

I have a freeradius server working. It works when I try to connect with a client defined in clients.conf (IP and shared secret is hardcoded in this file). I want to be able to connect with the ...
0
votes
1answer
159 views

radtest no response from outside localhost

I have set up freeradius in a Microsoft Azure VM. When I radtest from 127.0.0.1, it sends Access-Accept. But when I run radtest from another computer, freeradius doesn't respond. I am running ...
1
vote
1answer
51 views

Radius and FE80::/16 ignoring client

Why is my freeradius sever ignoring FE80::/16 clients? client.conf: client localhost { ipaddr = 127.0.0.1 < secret = testing123< require_message_authenticator = no nastype = ...
0
votes
0answers
99 views

How can I use winbind to return a filter-id based on group membership?

I have a couple of FreeRadius 3.0.9 servers which were just put into production on our Meraki network. We want to use user group membership in Active Directory to determine policy to be carried out by ...
0
votes
0answers
228 views

Freeradius authentication: LDAP group and SSID matching

I'm running a freeradius v3 instance with an LDAP backend for the authentication.The backend is working fine but I'v issues with my users.conf file.In this file, I'm trying to implement some rules to ...
0
votes
1answer
114 views

Poptop configured for freeradius but still authenticates through chap

I'm running Centos 6 64 bit with Poptop and radiusclient. When I connect to my poptop server this error comes up in the error log: Feb 21 14:40:42 alpha pptpd[13225]: CTRL: Client **** control ...
1
vote
1answer
253 views

How can I configure openLDAP to lookup userPassword via FreeRadius?

I am running Ubuntu 12.04 and OpenLDAP 2.4.28-1.1ubuntu4.5. I have users populated in LDAP with userPassword attribute being an {SHA1} hash. Users are able to login over SSH and authenticate to web ...
0
votes
0answers
260 views

wpa_supplicant doesn't reach freeradius in 802.1x eap-tls wired

I want to setup a 802.1x EAP-TLS connexion with freeradius, wpa_supplicant and a Cisco Switch My network : supplicant eth0-----f1/1 SWITCH f1/0-----eth1 Freeradius the SWITCH is an emulated Switch ...
0
votes
1answer
283 views

Active Directory / Freeradius / ntlm_auth / mail attribute

I am currently configuring a linux server with Freeradius to have our clients authenticate against our Active Directory for our WiFi-network. The goal is to have our users use the e-mail address that ...
1
vote
0answers
387 views

freeradius client send only accounting request, not access request

I have freeradius 2.2.6. Only at first connection the client send both access request and accounting request. subsequent connections sends only accouting request! This problem occurs ONLY with sone ...
1
vote
1answer
680 views

Is there a way to make systemctl start synchronous

I'm developing/have developed a unit file for the FreeRADIUS project to integrate with systemd. [Unit] Description=FreeRADIUS multi-protocol policy server After=syslog.target network.target ...