FreeRADIUS is an open source RADIUS server

learn more… | top users | synonyms

4
votes
1answer
592 views

Trying to authenticate to a Dell PowerConnect 5324 switch using FreeRADIUS and OpenLDAP

So here's the situation. I want to be able to use my LDAP credentials to log into this switch. Since there is no support for LDAP on the switch itself, I figured that FreeRADIUS has an LDAP module, ...
2
votes
1answer
447 views

FreeRadius Server: RadGroupReply attribute for maximum connected users?

I have a FreeRadius server and I'd like to set a limitation for the number of users connected to a specific NAS. My current set up is that every user that connects to a certain NAS is added to the ...
1
vote
1answer
246 views

How can I configure openLDAP to lookup userPassword via FreeRadius?

I am running Ubuntu 12.04 and OpenLDAP 2.4.28-1.1ubuntu4.5. I have users populated in LDAP with userPassword attribute being an {SHA1} hash. Users are able to login over SSH and authenticate to web ...
1
vote
1answer
627 views

Debian Samba share Authentification with RADIUS server

I'm trying to configure Samba (apt-get install samba) to authenticate users using a RADIUS server and i cannot find anything useful. Is it possible ? I tought i could set Samba to use the PAM ...
1
vote
1answer
877 views

l2tp/pptp + freeradius (accounting information only gets updated on disconnect)

I have a basic PPTP/L2TP setup that uses a remote freeradius server with mysql. Issue is that when a user gets connected to the vpn and as long as the user stays connected (could be hours), no ...
0
votes
1answer
32 views

Freeradius / python / package import fail

I'am tring to import an external library into (PyJWT) for a freeradius authorization, but when i run freeradius -X i get this error message. # Instantiating module "python" from file /etc/...
0
votes
1answer
40 views

Cannot connect with WPA2 ((AES)) algorithm + EAP-TTLS PAP with freeradius auth

I setup successfully an enterprise wifi connection with LDAP authentication by the mediation of Freeradius. I used EAP-TTLS PAP because I have hashed passwords in my OpenLDAP directory. In case I used ...
0
votes
1answer
125 views

FreeRadius configure two different authentication types

Have a particular scenario in that we would like to use FreeRadius to log into switchs using Kerberos credentials and network devices using EAP-TLS. Currently have this configured and working, but ...
0
votes
1answer
294 views

Freeradius/MySQL server not responding to external calls

I'm currently building up a (CentOS 7) freeradius with MySQL(mariadb) for radius authentication. I'm able to receive auth from local host testing using radtest. Once I use NTRadPing with the same ...
0
votes
1answer
279 views

Active Directory / Freeradius / ntlm_auth / mail attribute

I am currently configuring a linux server with Freeradius to have our clients authenticate against our Active Directory for our WiFi-network. The goal is to have our users use the e-mail address that ...
0
votes
1answer
113 views

Poptop configured for freeradius but still authenticates through chap

I'm running Centos 6 64 bit with Poptop and radiusclient. When I connect to my poptop server this error comes up in the error log: Feb 21 14:40:42 alpha pptpd[13225]: CTRL: Client **** control ...
4
votes
0answers
738 views

Multiple Valid Certificates in Windows 7 breaking Wired 802.1x Deployment

I have a Wired 802.1x deployment using TLS machine authentication on Windows 7 (built-in 802.1x supplicant) with the necessary certs (FreeRadius v2.2.3 generated on Linux). Cisco C2960 POE switch is ...
2
votes
0answers
1k views

Dynamic VLANs with FreeRadius, OpenLDAP & Cisco WLC

Currently have a FreeRADIUS 1.1.6 server authenticating users from OpenLDAP which are stored in the posixAccount account schema. We've now installed a Cisco WLC, and want to authenticate those users ...
1
vote
0answers
95 views

MS Active Directory with Google Authenticator

I am currently designing our new internal IT services, including IAM and e-mail. We currently use more or less no IAM or single sign-on solution. We have a WordPress based website, postfix + dovecot ...
1
vote
0answers
27 views

how to configure freeradius for separate Code and Password prompts, instead of a single Password prompt?

I've got a Freeradius server set up where the users in /etc/freeradius/users have Auth-Type := PAM. This makes radius refer to the /etc/pam.d/radiusd file, and in this file I have auth requisite ...
1
vote
0answers
22 views

Can a FreeRadius presenting a SHA1 certificate accept SHA2 client certificates and validate them against a CA that accepts SHA1 and SHA2 certificates?

Can a FreeRadius presenting a SHA1 certificate accept SHA2 client certificates and validate them against a CA that accepts SHA1 and SHA2 certificates? Another option would be that the FreeRadius ...
1
vote
0answers
384 views

freeradius client send only accounting request, not access request

I have freeradius 2.2.6. Only at first connection the client send both access request and accounting request. subsequent connections sends only accouting request! This problem occurs ONLY with sone ...
1
vote
0answers
106 views

Same VLAN for LAN only and Internet users on 802.1x network with pfSense as gateway

I am creating an ISP for a student residence. The LAN is already there and working, with several CISCO switches. I want to provide Internet by a secured and automatic way to those who pay for it (...
1
vote
0answers
442 views

802.1x dynamic vlan assignment not assigning VLAN

I recently dived into 802.1x authentication with dynamic vlan assigment. My current set up contains of: - A client - A SG220 cisco switch (the supplicant) - A freeradius (authenticator) ...
1
vote
0answers
119 views

How to set up a simple Cisco ISG config for controlling internet access

First off, here is my config so far. http://pastebin.com/fV2NGCE2 I've gone through a few guides online and the 15.2s manual and the xe3 manual for Cisco's ISG (intelligent services gateway) and ...
1
vote
0answers
742 views

FreeRadius Error reading /etc/freeradius/huntgroups

I've configured freeradius to use sql, everything was working fine, I was doing some tests with the users, and suddenly I cannot start the debugger because of this error : rlm_preprocess: Error ...
1
vote
0answers
213 views

FreeRadius-GoogleAuthenticator-Kerberos Password Change Weirdness

We are using FreeRadius, Kerberos and Google Authenticator to implement two-factor authentication. The two factor auth works fine, both from radtest and from a Watchguard firewall. To log in, a user ...
1
vote
0answers
2k views

Authenticate users from Active Directory with UserPrincipalName or Mail with FreeRADIUS

According to this documentation: http://deployingradius.com/documents/configuration/active_directory.html ; FreeRADIUS can authenticate Active Directory users using Samba's ntlm_auth, and in fact it ...
1
vote
0answers
482 views

Can't run freeradius as a service

I have a radiusd server on a virtual machine, it's already configured and working when I issue "radiusd -X" aka debug mode. My only issue is that when I try to run it as a service it fails... Here's ...
1
vote
0answers
168 views

Checking Statement of Health (NAP) info on Linux using Dhcp and Radius

I have a Linux DHCP server and windows clients. I want my DHCP server to assign an IP address from a network let's say 10.6.3.0/255.255.255.128 if the client has it's firewall enabled or an IP address ...
1
vote
0answers
882 views

FreeRadius external authenification script

I am trying to configure FreeRadius to work with my external authentification script. I have a custom module exec myscript { wait = yes shell_escape = yes program = "/path/...
1
vote
0answers
491 views

Debian 6.0.3, Freeradius 2.1.10, PostgreSQL 8.4 High memory Usage

We are running a Freeradius server on a VMware server and we have a high memory usage that I am trying to troubleshoot. We are running the PostgreSQL 8.4 as the database backend on the same server for ...
0
votes
0answers
5 views

AddRadiusCookieValid and AuthRadiusCookieValid in Apache Radius module

For one of my projects I have to set up two factor authentication. I have used Apache Free Radius module which acts as a client to Radius server. This setup is already been done and 2FA is working ...
0
votes
0answers
19 views

freeradius+ external users database

I need authenticate users with freeradius, these users are located in an existing external database. I think that the rest_module can help me to do that, in that case, which values the rest api ...
0
votes
0answers
24 views

FreeRadius: No User-Password or CHAP-Password attribute in the request

I've create a VPN Server(PPTP + FreeRadius2.1.12) on Ubuntu, the radtest command was succeed,but on OSX use pptp to login the VPN is not. Here's the configuration. Server: Ubuntu Client: OSX ...
0
votes
0answers
16 views

Roaming Issue with FreeRadius

I am using a FreeRadius Server (running on Centos 6.8) with CloudTrax (OpenMesh r5xx). When people try to roam between Access Points, they get logged off. Are there some settings in FreeRadius I ...
0
votes
0answers
16 views

Checking RadHuntGroup And Radgroupcheck to login specific NAS

I am actually setting up a FreeRADIUS Version 2.1.12, server that will manage authentication Users Cisco Switchs in company .. and i have one problem : I need to create some accounts that can be ...
0
votes
0answers
62 views

freeRADIUS TLS Alert read:fatal:unknown CA

I am trying to implement Hotspot 2.0 / Passpoint feature using the following: FreeRADIUS v3.0.11 Google Nexus 6P device running Marshmallow 6.0 OS Cisco Wireless LAN ( WLC Controller ) with 3702 AP. ...
0
votes
0answers
16 views

Implement zone migration on nomadix

I am trying to implement zone migration on nomadix. I have made the desired settings on the nomadix. However when I switch between the SSIDs it does not redirect me to the AAA page. Although I get ...
0
votes
0answers
43 views

authenticating Cisco IOS against FreeRADIUS not responding

My company's looking to move from local authentication on it's routers and switches to a central RADIUS server which I have been tasked with developing. I have the FreeRADIUS server properly ...
0
votes
0answers
95 views

accounting in rlm_rest Module freeradius

I work on a Hotspot Project with Coova Chilli and Freeradius. I Use FreeRADIUS in the latest stable Version 3.0.11. I created my rest and sites-enabled config file according to this post: Configuring ...
0
votes
0answers
19 views

Why do i need freeradius's keytab?

I'm trying to set up 802.1x for the wifi. I'm working with freeradius an windows server 2012. I need SSO ... help :) Currently I'm not able to set up freeradius krb. 'radtest' doesn't make it trough. ...
0
votes
0answers
15 views

How to check if the request is coming from nomadix using called station id

I want to do the following on the radius server :- Do an if statement to determine if we're dealing with a Nomadix using the %{Called-Station-Id} and if yes then need to execute a select query on a ...
0
votes
0answers
41 views

RADIUS + LDAP + Cisco router 1941

I have a unique setup in my data center where I have configured a Radius with LDAP for authentication and authorization in my cisco 1941 router for remote IPSEC vpn users. This works fine and dandy. ...
0
votes
0answers
235 views

Freeradius/Openldap/802.1X: PEAP-MSCHAPv2 XOR certificates

For WPA2 Enterprise I would like to have user authentication which is supported out-of-the-box by as many clients as possible (i.e., PEAP-MSCHAPv2). Furthermore, for laptops, workstations etc. I ...
0
votes
0answers
107 views

Freeradius not expanding “Calling-Station-Id” attribute in LDAP search

I'm trying to do PEAP-MSCHAPv2, then do a LDAP search to verify the user is in the correct group AND see if there MAC address is under a otherLoginWorkstation entry. If you look in the logs, ...
0
votes
0answers
51 views

Setting up chap on freeradius

I'm trying to setup CHAP authentification on our free radius server. By default, it is using PAP which for our purpose is highly inefficient. We are connecting to the server via a mikrotik router ...
0
votes
0answers
10 views

Can I use separate configuratons per site in freeradius?

I would like to have individual configurations for each of my freeradius sites, but I don't know how to achieve this or if it's possible?
0
votes
0answers
100 views

Connect to freeradius with clients with dynamic IP

I have a freeradius server working. It works when I try to connect with a client defined in clients.conf (IP and shared secret is hardcoded in this file). I want to be able to connect with the ...
0
votes
0answers
97 views

How can I use winbind to return a filter-id based on group membership?

I have a couple of FreeRadius 3.0.9 servers which were just put into production on our Meraki network. We want to use user group membership in Active Directory to determine policy to be carried out by ...
0
votes
0answers
226 views

Freeradius authentication: LDAP group and SSID matching

I'm running a freeradius v3 instance with an LDAP backend for the authentication.The backend is working fine but I'v issues with my users.conf file.In this file, I'm trying to implement some rules to ...
0
votes
0answers
258 views

wpa_supplicant doesn't reach freeradius in 802.1x eap-tls wired

I want to setup a 802.1x EAP-TLS connexion with freeradius, wpa_supplicant and a Cisco Switch My network : supplicant eth0-----f1/1 SWITCH f1/0-----eth1 Freeradius the SWITCH is an emulated Switch ...
0
votes
0answers
210 views

Mikrotik and freeradius, wpa2 enterpise, connection caching?

I'm not sure if connection caching is the correct term, but here are the symptoms and setup. We have a freeradius server that proxys to a windows radius server for ad auth on our wireless. All the AP'...
0
votes
0answers
154 views

EAP-TLS Passthrough from pppd to Radius?

I am setting up an IPSec+L2TP VPN for a couple of Windows boxes connecting to a Debian 7.6 (Wheezy) machine running ipsec tools and xl2tpd/pppd. Client authentication via mschapv2 works well enough; ...