Questions tagged [freeradius]
FreeRADIUS is an open source RADIUS server
285
questions
0
votes
1
answer
36
views
Freeradius: Passing attributes from virtual server launched by module to main server
i'm currently stuck on an issue for quite some time now. We have a freeradius server that handles both eap_tls requests from computers and mab authentication for phones. To achieve that, we have ...
0
votes
0
answers
49
views
FreeRADIUS authorization
We currently have FreeRADIUS to either forward or drop requests (to authentication server) based on the AV pairs received during client authentication (shown below). However what I would like to do ...
0
votes
0
answers
121
views
Freeradius and iPad, TLS Internal Error
I have configured FreeRADIUS with EAP-TTLS/GTC and I am using valid certificates issued by Let's Encrypt. The certificate is valid for radius.foo.it and I have cert.pem, chain.pem, fullchain.pem, and ...
0
votes
0
answers
31
views
How to make FreeRadius identify RADIUS Clients by MAC/Shortname instead of IP?
I use FreeRadius with Postgres SQL.
Is there a way to validate clients (i.e. routers, specifically Mikrotik ones) that uses anything else from Client IP?
The reason why I need that is that clients can ...
0
votes
0
answers
67
views
Freeradius over TCP
I just installed FreeRadius (Version 3.2.1) on my debian machine and configured the transport protocol of the default testing client to 'tcp'.
client localhost {
ipaddr = 127.0.0.1
proto = tcp
...
0
votes
2
answers
104
views
Freeradius filter ldap by group
I would like freeradius to check for group membership and allow access based on group membership:
My current config:
ldap {
identity = 'cn=radius,ou=bindings,dc=company,dc=com'
...
0
votes
0
answers
37
views
FreeRadius EAP-TLS Auth using Email Address
We have a requirement to authenticate devices to WIFI using the user's email address stored in AD. The devices are enrolled into InTune and the only shared piece of information is the email address.
...
0
votes
1
answer
178
views
Authenticate with Freeradius from LDAP fails
I want to set up Freeradius to be able to authenticate via an LDAP database.
Freeradius can connect and find the user in LDAP directory correctly:
2024-01-14T22:00:25.233318433Z (1) ldap: EXPAND (uid=%...
0
votes
1
answer
103
views
Sending COA request to NAS behind NAT from Freeradius
My Mikrotik NAS is behind a NAT so it only has a private network IP address. So for authentication, I am using the public IP address which works fine. But when Freeradius (hosted) has to send the COA ...
0
votes
0
answers
119
views
unable to authenticate using FreeRadius
I deployed freeradius and radtest looks good for localhost but when I sent Access-Request from external server, FreeRadius server doesn't reply:
2023-11-29 13:49:26.675791 (1) Access-Request Id 20 ...
0
votes
0
answers
39
views
Forcing freeradius to use 802.1x-2010
I am trying to troubleshoot a remote problem, where a piece of hardware is unable to connect using enterprise WPA. From the remote logs, it seems that the network is using 802.1X-2010, while the ...
0
votes
1
answer
319
views
Freeradius and Rest Authentication
I'm working on integrating freeradius into our platform and trying to get the authentication to work via a rest api on our platform. We have the rest api and the freeradius server running in docker ...
1
vote
1
answer
555
views
Ubuntu 22.04 LTS: EAP-TLS not working
I'm setting up RADIUS server using FreeRADIUS and self-signed certificate. Tested using eapol_test and successfully logged in. But when I'm trying to add a PC running Ubuntu 22.04 LTS to the network, ...
1
vote
0
answers
82
views
Manage nuumber of connections for OCserv and FreeRADIUS
I have numbers of Ocserv servers and connected to a FreeRADIUS server for authentication. I have configured directive bellow in Ocserv of each server to don't let a user connect more than 2 times.
...
0
votes
0
answers
124
views
how to set up eat /etc/pam.d/radiusd file to authenticate a user with his username, password and Google Authenticator token. Using Freeradius for 2FA
i have a problem about configuring the “/etc/pam.d/radiusd” file.
I am working on a Linux Debian System.
rn this is my configuration:
auth requisite pam_google_authenticator.so forward_pass
auth ...
0
votes
1
answer
126
views
Freeradius failed to start with dhcp port 67
I'm trying to use freeradius with dhcp on debian 12. I'm relaying DHCP packets from the router.
FR setup with DHCP listen port 67 : freeradius -X works just fine, as expected. But systemd cannot ...
0
votes
1
answer
183
views
FreeRADIUS / Active Directory / Computer Authentication / VLAN based off of UserDN
I am currently determining VLAN/dACL assignment based off of group membership of the computer authenticating and would like to instead switch to determining VLAN/dACL assignment based off of the OU ...
0
votes
0
answers
114
views
FreeRADIUS Certificate Based Authentication WiFi
We are currently trying to deploy a new SSID for BYOD devices. The plan is to host a FreeRADIUS (CA) server and generate a certificate which can be shared to all staff and can be imported onto their ...
0
votes
0
answers
310
views
OPNsense with Radius Accounting
I've been testing OPNsense radius accounting by following this document,
https://docs.opnsense.org/manual/how-tos/accounting.html
I am able to authenticate user through the captive portal but there is ...
0
votes
0
answers
106
views
Authenticate windows 7 PCs with Radius server
I have a network of Windows 7 PCs. And I am looking for a way to authenticate these computers through a centralized credential server. AD was one of the options but I don't have license for Windows ...
0
votes
2
answers
263
views
802.1x with GoDaddy Certificates EAP-TTLS
I have a little question. I am not sure but does clients need to resolve AAA Server via DNS and need to reach AAA Server if I use EAP-TTLS with GoDaddy x509 Certificates to verify the certificate on e....
0
votes
0
answers
98
views
Dynamic Client IP in freeRADIUS where client is identified by secret
I have multiple locations sending RADIUS requests to my server. These are currently configured as:
client any_client {
ipaddr = x.x.x.x
netmask = 32
secret = client_secret
shortname = ...
0
votes
2
answers
565
views
OpenVPN + PAM + Freeradius
Situation:
I have fully configured and working Freeradius server.
Installed OVPN 2.6.4 on other server. And goal is auth through Radius.
Installed pam-radius-auth. Configured (confs below).
...
0
votes
0
answers
671
views
SSL Error with EAP-TLS FreeRadius
My RADIUS Server is configured for EAP-TLS. I have a valid Server Certificate, Private Key and Fullchain file. When testing the authentication with a Client Certificate using eapol_test i get the ...
0
votes
0
answers
198
views
WPA3 with Freeradius and SAMBA AD DC
I have a working Freeradius authenticating WiFi users (windows,mac,linux,ios,android) with WPA2 enterprise using samba AD DC for user directory.
I want to move to WPA3 Enterprise but I am not sure if ...
0
votes
0
answers
27
views
How to fetch attribute in freeradius plicy.d/filter
I have an issue with getting empty Called-Station-Id in policy.d/filter of Freeradius. there are different VLANs the user can connect from I want to assign VLAN by filtering the WIFI name in the ...
1
vote
2
answers
2k
views
FreeRadius server not responding to Access-Request
I currently deployed freeradius and radtest looks good for local host but when I sent Access-Request from external server, FreeRadius server doesn't reply. see below output of radsniff
[root@pgw-...
1
vote
2
answers
411
views
FreeRADIUS keeps complaining about TLS 1.0/1.1, despite tls_min_version setting has been set to 1.2
I'm implementing EAP-TTLS with FreeRADIUS 3.0.21. Devices are able to connect, server is running. However, FreeRADIUS complains about TLS 1.0/1.1 are still available in its starting log messages. Here'...
0
votes
0
answers
890
views
Simultaneous Use in freeRadius 3.0
I install Ubuntu server 22.04
I install apache2
I install PHP
I install PostgreSQL and phpPgAdmin
I install freeradius 3.0
ln -s /etc/freeradius/3.0/mods-available/sql /etc/freeradius/3.0/mods-enabled/...
1
vote
1
answer
259
views
Freeradius case sentivitity of letters
I have VirtualMachine with freeradius server (3.0). I am using the authorization file which contains my PPPoE users. The problem seems to be the username: the login is in UPPER CASE which collides ...
0
votes
0
answers
2k
views
Sorry i'm stuck with freeradius to LDAP
Ok Im a little stuck with FreeRadus.
I think I have found the problem, I just don't understand why so If I try to auth over the wifi it looks like its not getting the password below is the debug of ...
1
vote
2
answers
515
views
FreeRADIUS / Active Directory / Computer Authentication
I'm looking for an easy way to turn:
User-Name = "host/DESKTOP-F6E023D.msad.domain.net"
to the following:
Stripped-User-Name := DESKTOP-F6E023D$
realm := msad.domain.net
In my virtual ...
1
vote
1
answer
2k
views
Cannot connect with Android native IKEv2 VPN client with Radius backend?
I can see that Android native VPN client supports IKEv2/MSCHAPv2, so in theory it should be possible to connect to Strongswan VPN server from Android without installing additional software (like the ...
1
vote
1
answer
459
views
FreeRADIUS & PrivacyIDEA Authentication
I am using PrivacyIDEA's implementation of FreeRADIUS to send authentication requests to PrivacyIDEA. However, I'd like to locally authenticate a specific user if the request comes in. I've modified ...
1
vote
1
answer
553
views
Freeradius with dhcp server: Calls to perl module returns error
This is a continuation of my previous question in sending static routes from Freeradius DHCP server implementation in combination with Strongswan VPN server.
When debugging Freeradius using tcpdump ...
0
votes
0
answers
340
views
(FREERADIUS&MYSQL) Getting aborted connections to my db (got an error reading communication packets)
https://i.stack.imgur.com/qUI2n.png
Running Debian 11, 1 week trying to figure out where this issue comes from, tried authentication method (made a fresh install of mariadb, setting unix socket so ...
0
votes
1
answer
4k
views
Daloradius ERROR: (3) sql: ERROR: rlm_sql_mysql: ERROR 1054 (Unknown column 'acctupdatetime' in 'field list')
Getting the following error after configuring freeradius with daloradius.
ERROR: (3) sql: ERROR: rlm_sql_mysql: ERROR 1054 (Unknown column 'acctupdatetime' in 'field list')
Radius server accounting ...
0
votes
1
answer
840
views
Is there a freeradius configuration to ignore requests from users or specific sources?
I've got a little server running freeradius for a handful of systems that I don't have any control over the firewalling or configuration for. (i.e. I can't control what it sends to me, but I need to ...
0
votes
1
answer
2k
views
FreeRADIUS accept any password for one user only
I need to configure one user on FreeRADIUS to authenticate and generate an access-accept regardless of the password submitted by the user. I can see how to do this for all users, but how can I do this ...
1
vote
1
answer
2k
views
FreeRadius with mixed CAs
Is it possible to run FreeRadius (version 3.0.13) with two different CAs? So that I have a server certificate from one CA and the client certificates come from a different CA?
Our current setup in /...
0
votes
1
answer
582
views
freeradius and openldap : vlan attribution working with radtest but not with wpa_supplicant
Both of my services freeradius and openldap are on the same server. The schema Freeradius is loaded into openldap.
I configured the radiusProfileDN of a user to link to a group. In this group, I have ...
1
vote
1
answer
2k
views
Freeradius: Authenticate users on certain condition
There is a network where users are using PPPoE to establish connections to the Access servers. We have lost the billing system and users' DB. The only condition that we know is that 'Valid credential ...
-1
votes
2
answers
2k
views
Configuring FreeRADIUS to log user commands
I need to be able to configure a radius server to log users' activities like the commands they're running whilst they were logged into a client device. Entries should be made in the /var/log/...
3
votes
2
answers
14k
views
How to encrypt user password in Freeradius
I recently set up a freeradius server and would like to change the user password that is presently in cleartext to encrypted in the /etc/freeradius/3.0/users file.
This is what it looks like on the ...
0
votes
2
answers
1k
views
Can radius be configured to assign ip addresses?
I would need to know if a radius server can be configured in such a way that it allows to assign a specific ip address to a device when it connects.
I mean, when a mobile device connects to the wifi ...
0
votes
1
answer
2k
views
FreeRADIUS - Can a username be altered?
Is there a way to alter a username before it before FreeRADIUS proxy it?
Example, you have the username "[email protected]" coming to the FreeRADIUS server, the FreeRADIUS server changes the ...
1
vote
0
answers
419
views
Disassociated WLAN (Disassociated due to inactivity)
I am reading the logs provided by an access point I have broadcasting an 802.11i (WPA) LAN network running with a radius authentication method, and the log returns the following two messages:
Aug 31 ...
1
vote
0
answers
280
views
Freeradius doesn't start when CoS user attributes are configured
I have a problem with a POC, I tried use Freeradius for authentication purpose and assign attributes for users of a broadband network (PPPoE). When I configure the user with this parameters I can ...
0
votes
0
answers
561
views
Wireless EAP / Freeradius, is there a way to check Mac Address in LDAP?
So we have EAP-PEAP over MSCHAP working. What I'd like to do is have a MAC Address check, for the purpose of making sure people aren't putting their credentials into random devices. I know SCEP would ...
0
votes
1
answer
7k
views
How to setup a proxy radius server (FreeRadius 3)
I am trying to setup a proxy Freeradius server that forwards all requests to another Freeradius server.
For reference see the following picture:
The reason for this setup is I want users to be to ...