Freeradius is an open source radius server

learn more… | top users | synonyms

1
vote
3answers
19 views

Is there a way to allow all external ip connections (i.e ipv6 as well as ipv4) in FreeRadius?

I need to accept all incoming connections to the FreeRadius server be it ipv6 or ipv4. I know that we can allow all ipv4 clients with: client 0.0.0.0/0 { secret = abcde shortname = xxxx } How ...
4
votes
1answer
474 views

Trying to authenticate to a Dell PowerConnect 5324 switch using FreeRADIUS and OpenLDAP

So here's the situation. I want to be able to use my LDAP credentials to log into this switch. Since there is no support for LDAP on the switch itself, I figured that FreeRADIUS has an LDAP module, ...
1
vote
1answer
898 views

TLS from Radius for Wifi is rejected by Win7

We do have the following Setup at our company Synology RS812+ hosting LDAP, RADIUS, DNS (Version DSM 5.0-4458 Update 2) 2*Cisco Wifi APs WAP561 (Firmware 1.0.3.4) Cisco Router ISA500 (Firmware ...
1
vote
1answer
365 views

l2tp/pptp + freeradius (accounting information only gets updated on disconnect)

I have a basic PPTP/L2TP setup that uses a remote freeradius server with mysql. Issue is that when a user gets connected to the vpn and as long as the user stays connected (could be hours), no ...
1
vote
1answer
634 views

Cisco 3750 switch wont transmit radius request to server

We have a radius server running on our lan and i am able to authenticate against it through direct link to the server. However when we want our clients to connect through our switch (cisco 3750 ...
0
votes
1answer
59 views

RADIUS authentication requests not relayed to RADIUS server

I am trying to set up a RADIUS server for 802.1x NAC over a Cisco IE 3000 Network Switch, using freeRadius to implement it. I know the switch knows where the RADIUS server is because I set up the ...
0
votes
1answer
359 views

FreeRADIUS w/ MySQL backend. IP Pool

I have a pool of addresses (172.16.0.0/24) configured on my NAS (Cisco 2921 router) for my IPsec clients. I have various subnet mask length subnetworks used for different user groups. For example I ...
0
votes
1answer
380 views

Authentication to Squid proxy with a RADIUS-authenticated client

I want to set up a wireless environment where WPA2-Enterprise is used for authentication to a FreeRADIUS server (using EAP-TTLS or PEAP), and the wireless client is seamlessly routed through and ...
0
votes
1answer
431 views

Freeradius server is not accepting accounting packets through tcpreplay

I am running a free radius server on system A. I am sending test accounting requests using radclient radclient -x systemA acct testing123 from system B. I can see that the radius server recieved these ...
0
votes
1answer
195 views

Freeradius my custom module to set Framed-IP-Address

I got a complicated schema where my radius server needs to send the Framed-IP-Address based on the results of a redis-db query so, I would like to know if if the post-auth part of my default config ...
0
votes
1answer
275 views

freeradius radacct update occurs after another connection establishment

sorry for my bad english.i connect via openvpn from my win7 client to freeradius server that is in the ubuntu os.my external database for authentication is ldap.i use mysql for freeradius accounting ...
0
votes
1answer
409 views

freeradius radacct update does not occur immediately

I use freeradius and ldap and openvpn in my project. when user disconnect from openvpn,radacct table does not update. I need that acctstoptime updated immediately. please guide me.
0
votes
1answer
528 views

coovachilli + freeradius, how to check how many users are currently login?

I installed CoovaChilli (AC) + freeradius in Ubuntu 10.10 successfully. How could I check how many user has already login and still remain active ?
0
votes
1answer
420 views

WPA2-Enterprise and RADIUS accounting server

Is mandatory to use WPA2-Enterprise to be able to send accounting packages to my RADIUS server from an access point (Meraki)?
-1
votes
1answer
118 views

FreeRADIUS certificate is going to expired

Recently I've created a RADIUS server (Freeradius) that authenticate with Active Directory. I follow this link to create this server: Now, when I see the "server.cnf" file into /etc/raddb/cert , I ...
-2
votes
1answer
173 views

Freeradius Log file Information

I have installed freeradius in Ubuntu 10 LTS and i run freeradius in debugging mode as "freeradius -X" where i see the live debugging logs. Now i want to know where these logs (accept / reject) are ...
3
votes
0answers
353 views

Multiple Valid Certificates in Windows 7 breaking Wired 802.1x Deployment

I have a Wired 802.1x deployment using TLS machine authentication on Windows 7 (built-in 802.1x supplicant) with the necessary certs (FreeRadius v2.2.3 generated on Linux). Cisco C2960 POE switch is ...
2
votes
0answers
191 views

FreeRADIUS using Active Directory integration broken without any traces

I've a FreeBSD 10.0 server running FreeRADIUS 3 and things got broken without any apparent reason. I'm using Winbind from Samba4 to authenticate with ntlm_auth. I've done some debug to solve the ...
2
votes
0answers
104 views

FreeRadius Server: RadGroupReply attribute for maximum connected users?

I have a FreeRadius server and I'd like to set a limitation for the number of users connected to a specific NAS. My current set up is that every user that connects to a certain NAS is added to the ...
2
votes
0answers
851 views

Dynamic VLANs with FreeRadius, OpenLDAP & Cisco WLC

Currently have a FreeRADIUS 1.1.6 server authenticating users from OpenLDAP which are stored in the posixAccount account schema. We've now installed a Cisco WLC, and want to authenticate those users ...
1
vote
0answers
27 views

FreeRadius Error reading /etc/freeradius/huntgroups

I've configured freeradius to use sql, everything was working fine, I was doing some tests with the users, and suddenly I cannot start the debugger because of this error : rlm_preprocess: Error ...
1
vote
0answers
98 views

FreeRadius-GoogleAuthenticator-Kerberos Password Change Weirdness

We are using FreeRadius, Kerberos and Google Authenticator to implement two-factor authentication. The two factor auth works fine, both from radtest and from a Watchguard firewall. To log in, a user ...
1
vote
0answers
712 views

Authenticate users from Active Directory with UserPrincipalName or Mail with FreeRADIUS

According to this documentation: http://deployingradius.com/documents/configuration/active_directory.html ; FreeRADIUS can authenticate Active Directory users using Samba's ntlm_auth, and in fact it ...
1
vote
0answers
235 views

Can't run freeradius as a service

I have a radiusd server on a virtual machine, it's already configured and working when I issue "radiusd -X" aka debug mode. My only issue is that when I try to run it as a service it fails... Here's ...
1
vote
0answers
91 views

Checking Statement of Health (NAP) info on Linux using Dhcp and Radius

I have a Linux DHCP server and windows clients. I want my DHCP server to assign an IP address from a network let's say 10.6.3.0/255.255.255.128 if the client has it's firewall enabled or an IP address ...
1
vote
0answers
472 views

FreeRadius external authenification script

I am trying to configure FreeRadius to work with my external authentification script. I have a custom module exec myscript { wait = yes shell_escape = yes program = ...
1
vote
0answers
130 views

authentication of VM's using PPPoE

I have two VM's running on Ubuntu box.Their name and IP addresses are give below. nas 192.168.129.153 home_user 192.168.129.152 I establish a ppp connection ...
1
vote
0answers
414 views

Debian 6.0.3, Freeradius 2.1.10, PostgreSQL 8.4 High memory Usage

We are running a Freeradius server on a VMware server and we have a high memory usage that I am trying to troubleshoot. We are running the PostgreSQL 8.4 as the database backend on the same server for ...
0
votes
0answers
12 views

Reject Users by NAS on freeradius

Simple ('users') freeradius setup for wireless access (PEAP-mschapv2 as default on NAS1, plus EAP-TLS) and VPN (PPP-mschapv2 on NAS2). VPN users should not be able to gain wireless access on NAS1 and ...
0
votes
0answers
23 views

EAP-TLS Passthrough from pppd to Radius?

I am setting up an IPSec+L2TP VPN for a couple of Windows boxes connecting to a Debian 7.6 (Wheezy) machine running ipsec tools and xl2tpd/pppd. Client authentication via mschapv2 works well enough; ...
0
votes
0answers
37 views

OpenVPN Radiusplugin AD and the user restriction

Im using FreeRadius which is using Samba4 (AD DC) as the user/password provider. OpenVPN is using Radiusplugin, which use that FreeRadius Server for authentication. This solution work great, but I ...
0
votes
0answers
53 views

FreeRadius Syncing Across Multiple Physical Sites

I've been searching for an answer but I've found the documentation on this to be less than ideal. We have multiple sites spread across the country and we're looking to have a single Freeradius server ...
0
votes
0answers
37 views

Configure freeradius as a linux service

I install freeradius-2.2.0-7 on CentOS 7, and I finished configuring it, for the test on the same Linux host, he replied "access-accept" but when I repeated the same test from another host on the ...
0
votes
0answers
22 views

Radius Users grouped by NAS Client

I have searched for many hours about the possibility of FreeRadius separate users by NAS client, but, without success :( I want to separate my users grouping by NAS client, as follow: Nas client 01 ...
0
votes
0answers
34 views

How to chroot FreeRadius

I have set up FreeRADIUS 2.1.12 on Debian for authentication in a WPA2-Enterprise environment. Now I'd like to jail it with chroot. There is a parameter in radiusd.conf configuration file pointing to ...
0
votes
0answers
333 views

Cisco ASA + FreeRadius: Downloadable ACL configuration

VPN users that are using FreeRadius are having access to all VLANs. VPN users using local authentication have local ACLs applied to their access. I need to know what configuration change I need to ...
0
votes
0answers
123 views

EAP-TLS MSCHAPv2 Windows Server Certificate Requirements for RADIUS

I am trying to get RADIUS (freeradius) in our Network working, there are still some problems with Microsoft Supplicants which reject the certificate installed on the RADIUS Server There is a ...
0
votes
0answers
97 views

OpenVPN radiusplugin for IPV6 Freeradius Server

I'm having trouble configuring radiusplugin (nongnu.org) for OpenVPN auth with Freeradius server which listen on it's IPV6 interface. Is it possible to use radiusplugin.cnf with IPv6 server address? I ...
0
votes
0answers
14 views

FreeRadius with login RTypical security Option

I dont want to use FreeRadius what CHAP, MS CHAP , PAP login method i just want to use the following picture login security what is the security method name? and how to apply in FreeRadius ?
0
votes
0answers
230 views

Window CLient User Connect PPTP VPN FreeRadius verify username from MySQL not chap-secrets file

FreeRadius are working proper Sending Access-Request of id 223 to 110.4.43.172 port 1812 User-Name = "test" User-Password = "mypassword" NAS-IP-Address = 127.0.0.1 ...