Freeradius is an open source radius server

learn more… | top users | synonyms

1
vote
3answers
153 views

Is there a way to allow all external ip connections (i.e ipv6 as well as ipv4) in FreeRadius?

I need to accept all incoming connections to the FreeRadius server be it ipv6 or ipv4. I know that we can allow all ipv4 clients with: client 0.0.0.0/0 { secret = abcde shortname = xxxx } How ...
2
votes
2answers
2k views

TLS from Radius for Wifi is rejected by Win7

We do have the following Setup at our company Synology RS812+ hosting LDAP, RADIUS, DNS (Version DSM 5.0-4458 Update 2) 2*Cisco Wifi APs WAP561 (Firmware 1.0.3.4) Cisco Router ISA500 (Firmware ...
4
votes
1answer
550 views

Trying to authenticate to a Dell PowerConnect 5324 switch using FreeRADIUS and OpenLDAP

So here's the situation. I want to be able to use my LDAP credentials to log into this switch. Since there is no support for LDAP on the switch itself, I figured that FreeRADIUS has an LDAP module, ...
2
votes
1answer
277 views

FreeRadius Server: RadGroupReply attribute for maximum connected users?

I have a FreeRadius server and I'd like to set a limitation for the number of users connected to a specific NAS. My current set up is that every user that connects to a certain NAS is added to the ...
1
vote
1answer
173 views

Debian Samba share Authentification with RADIUS server

I'm trying to configure Samba (apt-get install samba) to authenticate users using a RADIUS server and i cannot find anything useful. Is it possible ? I tought i could set Samba to use the PAM ...
1
vote
1answer
646 views

l2tp/pptp + freeradius (accounting information only gets updated on disconnect)

I have a basic PPTP/L2TP setup that uses a remote freeradius server with mysql. Issue is that when a user gets connected to the vpn and as long as the user stays connected (could be hours), no ...
1
vote
1answer
931 views

Cisco 3750 switch wont transmit radius request to server

We have a radius server running on our lan and i am able to authenticate against it through direct link to the server. However when we want our clients to connect through our switch (cisco 3750 ...
0
votes
1answer
96 views

Freeradius/MySQL server not responding to external calls

I'm currently building up a (CentOS 7) freeradius with MySQL(mariadb) for radius authentication. I'm able to receive auth from local host testing using radtest. Once I use NTRadPing with the same ...
0
votes
1answer
108 views

Active Directory / Freeradius / ntlm_auth / mail attribute

I am currently configuring a linux server with Freeradius to have our clients authenticate against our Active Directory for our WiFi-network. The goal is to have our users use the e-mail address that ...
0
votes
1answer
130 views

freeradius broken after apt-get update

Ubuntu 14.04.1 LTS apt-get update /upgrade was run last night at around 10pm. This morning people are saying that they can't get into ftp and wifi because these services are auth'd by freeradius. ...
0
votes
1answer
105 views

RADIUS authentication requests not relayed to RADIUS server

I am trying to set up a RADIUS server for 802.1x NAC over a Cisco IE 3000 Network Switch, using freeRadius to implement it. I know the switch knows where the RADIUS server is because I set up the ...
0
votes
1answer
697 views

FreeRADIUS w/ MySQL backend. IP Pool

I have a pool of addresses (172.16.0.0/24) configured on my NAS (Cisco 2921 router) for my IPsec clients. I have various subnet mask length subnetworks used for different user groups. For example I ...
0
votes
1answer
794 views

Freeradius server is not accepting accounting packets through tcpreplay

I am running a free radius server on system A. I am sending test accounting requests using radclient radclient -x systemA acct testing123 from system B. I can see that the radius server recieved these ...
0
votes
1answer
325 views

Freeradius my custom module to set Framed-IP-Address

I got a complicated schema where my radius server needs to send the Framed-IP-Address based on the results of a redis-db query so, I would like to know if if the post-auth part of my default config ...
0
votes
1answer
320 views

freeradius radacct update occurs after another connection establishment

sorry for my bad english.i connect via openvpn from my win7 client to freeradius server that is in the ubuntu os.my external database for authentication is ldap.i use mysql for freeradius accounting ...
0
votes
1answer
480 views

freeradius radacct update does not occur immediately

I use freeradius and ldap and openvpn in my project. when user disconnect from openvpn,radacct table does not update. I need that acctstoptime updated immediately. please guide me.
0
votes
1answer
688 views

coovachilli + freeradius, how to check how many users are currently login?

I installed CoovaChilli (AC) + freeradius in Ubuntu 10.10 successfully. How could I check how many user has already login and still remain active ?
0
votes
1answer
461 views

WPA2-Enterprise and RADIUS accounting server

Is mandatory to use WPA2-Enterprise to be able to send accounting packages to my RADIUS server from an access point (Meraki)?
-1
votes
1answer
396 views

FreeRADIUS certificate is going to expired

Recently I've created a RADIUS server (Freeradius) that authenticate with Active Directory. I follow this link to create this server: Now, when I see the "server.cnf" file into /etc/raddb/cert , I ...
-2
votes
1answer
932 views

Freeradius Log file Information

I have installed freeradius in Ubuntu 10 LTS and i run freeradius in debugging mode as "freeradius -X" where i see the live debugging logs. Now i want to know where these logs (accept / reject) are ...
4
votes
0answers
510 views

Multiple Valid Certificates in Windows 7 breaking Wired 802.1x Deployment

I have a Wired 802.1x deployment using TLS machine authentication on Windows 7 (built-in 802.1x supplicant) with the necessary certs (FreeRadius v2.2.3 generated on Linux). Cisco C2960 POE switch is ...
2
votes
0answers
382 views

FreeRADIUS using Active Directory integration broken without any traces

I've a FreeBSD 10.0 server running FreeRADIUS 3 and things got broken without any apparent reason. I'm using Winbind from Samba4 to authenticate with ntlm_auth. I've done some debug to solve the ...
2
votes
0answers
998 views

Dynamic VLANs with FreeRadius, OpenLDAP & Cisco WLC

Currently have a FreeRADIUS 1.1.6 server authenticating users from OpenLDAP which are stored in the posixAccount account schema. We've now installed a Cisco WLC, and want to authenticate those users ...
1
vote
0answers
46 views

freeradius client send only accounting request, not access request

I have freeradius 2.2.6. Only at first connection the client send both access request and accounting request. subsequent connections sends only accouting request! This problem occurs ONLY with sone ...
1
vote
0answers
48 views

Same VLAN for LAN only and Internet users on 802.1x network with pfSense as gateway

I am creating an ISP for a student residence. The LAN is already there and working, with several CISCO switches. I want to provide Internet by a secured and automatic way to those who pay for it ...
1
vote
0answers
180 views

802.1x dynamic vlan assignment not assigning VLAN

I recently dived into 802.1x authentication with dynamic vlan assigment. My current set up contains of: - A client - A SG220 cisco switch (the supplicant) - A freeradius (authenticator) ...
1
vote
0answers
51 views

How to set up a simple Cisco ISG config for controlling internet access

First off, here is my config so far. http://pastebin.com/fV2NGCE2 I've gone through a few guides online and the 15.2s manual and the xe3 manual for Cisco's ISG (intelligent services gateway) and ...
1
vote
0answers
351 views

FreeRadius Error reading /etc/freeradius/huntgroups

I've configured freeradius to use sql, everything was working fine, I was doing some tests with the users, and suddenly I cannot start the debugger because of this error : rlm_preprocess: Error ...
1
vote
0answers
157 views

FreeRadius-GoogleAuthenticator-Kerberos Password Change Weirdness

We are using FreeRadius, Kerberos and Google Authenticator to implement two-factor authentication. The two factor auth works fine, both from radtest and from a Watchguard firewall. To log in, a user ...
1
vote
0answers
2k views

Authenticate users from Active Directory with UserPrincipalName or Mail with FreeRADIUS

According to this documentation: http://deployingradius.com/documents/configuration/active_directory.html ; FreeRADIUS can authenticate Active Directory users using Samba's ntlm_auth, and in fact it ...
1
vote
0answers
360 views

Can't run freeradius as a service

I have a radiusd server on a virtual machine, it's already configured and working when I issue "radiusd -X" aka debug mode. My only issue is that when I try to run it as a service it fails... Here's ...
1
vote
0answers
137 views

Checking Statement of Health (NAP) info on Linux using Dhcp and Radius

I have a Linux DHCP server and windows clients. I want my DHCP server to assign an IP address from a network let's say 10.6.3.0/255.255.255.128 if the client has it's firewall enabled or an IP address ...
1
vote
0answers
677 views

FreeRadius external authenification script

I am trying to configure FreeRadius to work with my external authentification script. I have a custom module exec myscript { wait = yes shell_escape = yes program = ...
1
vote
0answers
138 views

authentication of VM's using PPPoE

I have two VM's running on Ubuntu box.Their name and IP addresses are give below. nas 192.168.129.153 home_user 192.168.129.152 I establish a ppp connection ...
1
vote
0answers
453 views

Debian 6.0.3, Freeradius 2.1.10, PostgreSQL 8.4 High memory Usage

We are running a Freeradius server on a VMware server and we have a high memory usage that I am trying to troubleshoot. We are running the PostgreSQL 8.4 as the database backend on the same server for ...
0
votes
0answers
29 views

wpa_supplicant doesn't reach freeradius in 802.1x eap-tls wired

I want to setup a 802.1x EAP-TLS connexion with freeradius, wpa_supplicant and a Cisco Switch My network : supplicant eth0-----f1/1 SWITCH f1/0-----eth1 Freeradius the SWITCH is an emulated Switch ...
0
votes
0answers
28 views

Mikrotik and freeradius, wpa2 enterpise, connection caching?

I'm not sure if connection caching is the correct term, but here are the symptoms and setup. We have a freeradius server that proxys to a windows radius server for ad auth on our wireless. All the ...
0
votes
0answers
37 views

OpenVPN + FreeRADIUS Authentication Error

Trying to set up a OpenVPN server with FreeRADIUS server running on the same machine. All servers are running but I'm getting errors with authentication when the end user logs on VIA OpenVPN client. ...
0
votes
0answers
101 views

MultiOTP + FreeRADIUS + MS Active Directory

I am running a CentOS 6.6 64 bit Server with FreeRADIUS 2.1.12 installed from base repository. Additionally I am using MultiOTP (http://www.multiotp.net/) which is configured to connect to our Windows ...
0
votes
0answers
51 views

Poptop configured for freeradius but still authenticates through chap

I'm running Centos 6 64 bit with Poptop and radiusclient. When I connect to my poptop server this error comes up in the error log: Feb 21 14:40:42 alpha pptpd[13225]: CTRL: Client **** control ...
0
votes
0answers
60 views

Reject Users by NAS on freeradius

Simple ('users') freeradius setup for wireless access (PEAP-mschapv2 as default on NAS1, plus EAP-TLS) and VPN (PPP-mschapv2 on NAS2). VPN users should not be able to gain wireless access on NAS1 and ...
0
votes
0answers
91 views

EAP-TLS Passthrough from pppd to Radius?

I am setting up an IPSec+L2TP VPN for a couple of Windows boxes connecting to a Debian 7.6 (Wheezy) machine running ipsec tools and xl2tpd/pppd. Client authentication via mschapv2 works well enough; ...
0
votes
0answers
83 views

OpenVPN Radiusplugin AD and the user restriction

Im using FreeRadius which is using Samba4 (AD DC) as the user/password provider. OpenVPN is using Radiusplugin, which use that FreeRadius Server for authentication. This solution work great, but I ...
0
votes
0answers
143 views

FreeRadius Syncing Across Multiple Physical Sites

I've been searching for an answer but I've found the documentation on this to be less than ideal. We have multiple sites spread across the country and we're looking to have a single Freeradius server ...