Questions tagged [freeradius]

FreeRADIUS is an open source RADIUS server

Filter by
Sorted by
Tagged with
0 votes
1 answer
36 views

Freeradius: Passing attributes from virtual server launched by module to main server

i'm currently stuck on an issue for quite some time now. We have a freeradius server that handles both eap_tls requests from computers and mab authentication for phones. To achieve that, we have ...
TNM's user avatar
  • 1
0 votes
0 answers
49 views

FreeRADIUS authorization

We currently have FreeRADIUS to either forward or drop requests (to authentication server) based on the AV pairs received during client authentication (shown below). However what I would like to do ...
lquin1978's user avatar
0 votes
0 answers
121 views

Freeradius and iPad, TLS Internal Error

I have configured FreeRADIUS with EAP-TTLS/GTC and I am using valid certificates issued by Let's Encrypt. The certificate is valid for radius.foo.it and I have cert.pem, chain.pem, fullchain.pem, and ...
mirawara's user avatar
0 votes
0 answers
31 views

How to make FreeRadius identify RADIUS Clients by MAC/Shortname instead of IP?

I use FreeRadius with Postgres SQL. Is there a way to validate clients (i.e. routers, specifically Mikrotik ones) that uses anything else from Client IP? The reason why I need that is that clients can ...
Георгий Садовой's user avatar
0 votes
0 answers
67 views

Freeradius over TCP

I just installed FreeRadius (Version 3.2.1) on my debian machine and configured the transport protocol of the default testing client to 'tcp'. client localhost { ipaddr = 127.0.0.1 proto = tcp ...
maersk's user avatar
  • 1
0 votes
2 answers
104 views

Freeradius filter ldap by group

I would like freeradius to check for group membership and allow access based on group membership: My current config: ldap { identity = 'cn=radius,ou=bindings,dc=company,dc=com' ...
Kristof Rado's user avatar
0 votes
0 answers
37 views

FreeRadius EAP-TLS Auth using Email Address

We have a requirement to authenticate devices to WIFI using the user's email address stored in AD. The devices are enrolled into InTune and the only shared piece of information is the email address. ...
Phil Lowes's user avatar
0 votes
1 answer
178 views

Authenticate with Freeradius from LDAP fails

I want to set up Freeradius to be able to authenticate via an LDAP database. Freeradius can connect and find the user in LDAP directory correctly: 2024-01-14T22:00:25.233318433Z (1) ldap: EXPAND (uid=%...
Kristof Rado's user avatar
0 votes
1 answer
103 views

Sending COA request to NAS behind NAT from Freeradius

My Mikrotik NAS is behind a NAT so it only has a private network IP address. So for authentication, I am using the public IP address which works fine. But when Freeradius (hosted) has to send the COA ...
sajeyks mwangi's user avatar
0 votes
0 answers
119 views

unable to authenticate using FreeRadius

I deployed freeradius and radtest looks good for localhost but when I sent Access-Request from external server, FreeRadius server doesn't reply: 2023-11-29 13:49:26.675791 (1) Access-Request Id 20 ...
deepansha's user avatar
0 votes
0 answers
39 views

Forcing freeradius to use 802.1x-2010

I am trying to troubleshoot a remote problem, where a piece of hardware is unable to connect using enterprise WPA. From the remote logs, it seems that the network is using 802.1X-2010, while the ...
mgs's user avatar
  • 1
0 votes
1 answer
319 views

Freeradius and Rest Authentication

I'm working on integrating freeradius into our platform and trying to get the authentication to work via a rest api on our platform. We have the rest api and the freeradius server running in docker ...
Simon's user avatar
  • 1
1 vote
1 answer
555 views

Ubuntu 22.04 LTS: EAP-TLS not working

I'm setting up RADIUS server using FreeRADIUS and self-signed certificate. Tested using eapol_test and successfully logged in. But when I'm trying to add a PC running Ubuntu 22.04 LTS to the network, ...
RichardLiu's user avatar
1 vote
0 answers
82 views

Manage nuumber of connections for OCserv and FreeRADIUS

I have numbers of Ocserv servers and connected to a FreeRADIUS server for authentication. I have configured directive bellow in Ocserv of each server to don't let a user connect more than 2 times. ...
AminMZ's user avatar
  • 13
0 votes
0 answers
124 views

how to set up eat /etc/pam.d/radiusd file to authenticate a user with his username, password and Google Authenticator token. Using Freeradius for 2FA

i have a problem about configuring the “/etc/pam.d/radiusd” file. I am working on a Linux Debian System. rn this is my configuration: auth requisite pam_google_authenticator.so forward_pass auth ...
tristesse11's user avatar
0 votes
1 answer
126 views

Freeradius failed to start with dhcp port 67

I'm trying to use freeradius with dhcp on debian 12. I'm relaying DHCP packets from the router. FR setup with DHCP listen port 67 : freeradius -X works just fine, as expected. But systemd cannot ...
amlanhldr's user avatar
0 votes
1 answer
183 views

FreeRADIUS / Active Directory / Computer Authentication / VLAN based off of UserDN

I am currently determining VLAN/dACL assignment based off of group membership of the computer authenticating and would like to instead switch to determining VLAN/dACL assignment based off of the OU ...
another_netadmin's user avatar
0 votes
0 answers
114 views

FreeRADIUS Certificate Based Authentication WiFi

We are currently trying to deploy a new SSID for BYOD devices. The plan is to host a FreeRADIUS (CA) server and generate a certificate which can be shared to all staff and can be imported onto their ...
0xab3d's user avatar
  • 101
0 votes
0 answers
310 views

OPNsense with Radius Accounting

I've been testing OPNsense radius accounting by following this document, https://docs.opnsense.org/manual/how-tos/accounting.html I am able to authenticate user through the captive portal but there is ...
Mindf's user avatar
  • 1
0 votes
0 answers
106 views

Authenticate windows 7 PCs with Radius server

I have a network of Windows 7 PCs. And I am looking for a way to authenticate these computers through a centralized credential server. AD was one of the options but I don't have license for Windows ...
Canonical's user avatar
0 votes
2 answers
263 views

802.1x with GoDaddy Certificates EAP-TTLS

I have a little question. I am not sure but does clients need to resolve AAA Server via DNS and need to reach AAA Server if I use EAP-TTLS with GoDaddy x509 Certificates to verify the certificate on e....
Torsten Wilms's user avatar
0 votes
0 answers
98 views

Dynamic Client IP in freeRADIUS where client is identified by secret

I have multiple locations sending RADIUS requests to my server. These are currently configured as: client any_client { ipaddr = x.x.x.x netmask = 32 secret = client_secret shortname = ...
Damian Games's user avatar
0 votes
2 answers
565 views

OpenVPN + PAM + Freeradius

Situation: I have fully configured and working Freeradius server. Installed OVPN 2.6.4 on other server. And goal is auth through Radius. Installed pam-radius-auth. Configured (confs below). ...
Comandante's user avatar
0 votes
0 answers
671 views

SSL Error with EAP-TLS FreeRadius

My RADIUS Server is configured for EAP-TLS. I have a valid Server Certificate, Private Key and Fullchain file. When testing the authentication with a Client Certificate using eapol_test i get the ...
user20984154's user avatar
0 votes
0 answers
198 views

WPA3 with Freeradius and SAMBA AD DC

I have a working Freeradius authenticating WiFi users (windows,mac,linux,ios,android) with WPA2 enterprise using samba AD DC for user directory. I want to move to WPA3 Enterprise but I am not sure if ...
Marko's user avatar
  • 371
0 votes
0 answers
27 views

How to fetch attribute in freeradius plicy.d/filter

I have an issue with getting empty Called-Station-Id in policy.d/filter of Freeradius. there are different VLANs the user can connect from I want to assign VLAN by filtering the WIFI name in the ...
MecaTheclau's user avatar
1 vote
2 answers
2k views

FreeRadius server not responding to Access-Request

I currently deployed freeradius and radtest looks good for local host but when I sent Access-Request from external server, FreeRadius server doesn't reply. see below output of radsniff [root@pgw-...
Oye's user avatar
  • 11
1 vote
2 answers
411 views

FreeRADIUS keeps complaining about TLS 1.0/1.1, despite tls_min_version setting has been set to 1.2

I'm implementing EAP-TTLS with FreeRADIUS 3.0.21. Devices are able to connect, server is running. However, FreeRADIUS complains about TLS 1.0/1.1 are still available in its starting log messages. Here'...
Václav's user avatar
  • 111
0 votes
0 answers
890 views

Simultaneous Use in freeRadius 3.0

I install Ubuntu server 22.04 I install apache2 I install PHP I install PostgreSQL and phpPgAdmin I install freeradius 3.0 ln -s /etc/freeradius/3.0/mods-available/sql /etc/freeradius/3.0/mods-enabled/...
Richard's user avatar
1 vote
1 answer
259 views

Freeradius case sentivitity of letters

I have VirtualMachine with freeradius server (3.0). I am using the authorization file which contains my PPPoE users. The problem seems to be the username: the login is in UPPER CASE which collides ...
kekosz's user avatar
  • 13
0 votes
0 answers
2k views

Sorry i'm stuck with freeradius to LDAP

Ok Im a little stuck with FreeRadus. I think I have found the problem, I just don't understand why so If I try to auth over the wifi it looks like its not getting the password below is the debug of ...
Alex Orbit's user avatar
1 vote
2 answers
515 views

FreeRADIUS / Active Directory / Computer Authentication

I'm looking for an easy way to turn: User-Name = "host/DESKTOP-F6E023D.msad.domain.net" to the following: Stripped-User-Name := DESKTOP-F6E023D$ realm := msad.domain.net In my virtual ...
another_netadmin's user avatar
1 vote
1 answer
2k views

Cannot connect with Android native IKEv2 VPN client with Radius backend?

I can see that Android native VPN client supports IKEv2/MSCHAPv2, so in theory it should be possible to connect to Strongswan VPN server from Android without installing additional software (like the ...
Lasse Michael Mølgaard's user avatar
1 vote
1 answer
459 views

FreeRADIUS & PrivacyIDEA Authentication

I am using PrivacyIDEA's implementation of FreeRADIUS to send authentication requests to PrivacyIDEA. However, I'd like to locally authenticate a specific user if the request comes in. I've modified ...
ProfessionalDummy's user avatar
1 vote
1 answer
553 views

Freeradius with dhcp server: Calls to perl module returns error

This is a continuation of my previous question in sending static routes from Freeradius DHCP server implementation in combination with Strongswan VPN server. When debugging Freeradius using tcpdump ...
Lasse Michael Mølgaard's user avatar
0 votes
0 answers
340 views

(FREERADIUS&MYSQL) Getting aborted connections to my db (got an error reading communication packets)

https://i.stack.imgur.com/qUI2n.png Running Debian 11, 1 week trying to figure out where this issue comes from, tried authentication method (made a fresh install of mariadb, setting unix socket so ...
arty0m's user avatar
  • 1
0 votes
1 answer
4k views

Daloradius ERROR: (3) sql: ERROR: rlm_sql_mysql: ERROR 1054 (Unknown column 'acctupdatetime' in 'field list')

Getting the following error after configuring freeradius with daloradius. ERROR: (3) sql: ERROR: rlm_sql_mysql: ERROR 1054 (Unknown column 'acctupdatetime' in 'field list') Radius server accounting ...
xaander1's user avatar
  • 141
0 votes
1 answer
840 views

Is there a freeradius configuration to ignore requests from users or specific sources?

I've got a little server running freeradius for a handful of systems that I don't have any control over the firewalling or configuration for. (i.e. I can't control what it sends to me, but I need to ...
Peter Turner's user avatar
  • 2,278
0 votes
1 answer
2k views

FreeRADIUS accept any password for one user only

I need to configure one user on FreeRADIUS to authenticate and generate an access-accept regardless of the password submitted by the user. I can see how to do this for all users, but how can I do this ...
btongeorge's user avatar
1 vote
1 answer
2k views

FreeRadius with mixed CAs

Is it possible to run FreeRadius (version 3.0.13) with two different CAs? So that I have a server certificate from one CA and the client certificates come from a different CA? Our current setup in /...
Thomas's user avatar
  • 145
0 votes
1 answer
582 views

freeradius and openldap : vlan attribution working with radtest but not with wpa_supplicant

Both of my services freeradius and openldap are on the same server. The schema Freeradius is loaded into openldap. I configured the radiusProfileDN of a user to link to a group. In this group, I have ...
user161458's user avatar
1 vote
1 answer
2k views

Freeradius: Authenticate users on certain condition

There is a network where users are using PPPoE to establish connections to the Access servers. We have lost the billing system and users' DB. The only condition that we know is that 'Valid credential ...
Vasyl Herman's user avatar
-1 votes
2 answers
2k views

Configuring FreeRADIUS to log user commands

I need to be able to configure a radius server to log users' activities like the commands they're running whilst they were logged into a client device. Entries should be made in the /var/log/...
wallacex's user avatar
3 votes
2 answers
14k views

How to encrypt user password in Freeradius

I recently set up a freeradius server and would like to change the user password that is presently in cleartext to encrypted in the /etc/freeradius/3.0/users file. This is what it looks like on the ...
wallacex's user avatar
0 votes
2 answers
1k views

Can radius be configured to assign ip addresses?

I would need to know if a radius server can be configured in such a way that it allows to assign a specific ip address to a device when it connects. I mean, when a mobile device connects to the wifi ...
user3105's user avatar
  • 129
0 votes
1 answer
2k views

FreeRADIUS - Can a username be altered?

Is there a way to alter a username before it before FreeRADIUS proxy it? Example, you have the username "[email protected]" coming to the FreeRADIUS server, the FreeRADIUS server changes the ...
Lord Kryx's user avatar
1 vote
0 answers
419 views

Disassociated WLAN (Disassociated due to inactivity)

I am reading the logs provided by an access point I have broadcasting an 802.11i (WPA) LAN network running with a radius authentication method, and the log returns the following two messages: Aug 31 ...
user3105's user avatar
  • 129
1 vote
0 answers
280 views

Freeradius doesn't start when CoS user attributes are configured

I have a problem with a POC, I tried use Freeradius for authentication purpose and assign attributes for users of a broadband network (PPPoE). When I configure the user with this parameters I can ...
Pablo Xavier's user avatar
0 votes
0 answers
561 views

Wireless EAP / Freeradius, is there a way to check Mac Address in LDAP?

So we have EAP-PEAP over MSCHAP working. What I'd like to do is have a MAC Address check, for the purpose of making sure people aren't putting their credentials into random devices. I know SCEP would ...
Jonathan S. Fisher's user avatar
0 votes
1 answer
7k views

How to setup a proxy radius server (FreeRadius 3)

I am trying to setup a proxy Freeradius server that forwards all requests to another Freeradius server. For reference see the following picture: The reason for this setup is I want users to be to ...
Lasse Michael Mølgaard's user avatar

1
2 3 4 5 6