Freeradius is an open source radius server

learn more… | top users | synonyms

9
votes
1answer
1k views

Configuring WPA2-Enterprise with Freeradius

I'm trying to set up an authenticated wifi network with Freeradius. I've managed to get things working using self-signed certs etc. The problem is Windows clients need to uncheck the "Automatically ...
6
votes
1answer
308 views

Need help understanding PAM directives

I have the following directives in my /etc/pam.d/sshd file on a RHEL5 box and I'm a bit confused. These directives are there to make LDAP+RADIUS+OTP work. What I'm trying to do is tell pam not to ...
5
votes
2answers
2k views

FreeRADIUS2 and LDAP Authentication

I am currently running a CentOS 5.5 box with FreeRADIUS2 on it. I have the simple authentication turned on right now (username and pass is set via /etc/raddb/users). I want to have FreeRADIUS ...
4
votes
1answer
461 views

Trying to authenticate to a Dell PowerConnect 5324 switch using FreeRADIUS and OpenLDAP

So here's the situation. I want to be able to use my LDAP credentials to log into this switch. Since there is no support for LDAP on the switch itself, I figured that FreeRADIUS has an LDAP module, ...
3
votes
2answers
629 views

Centos 7. Freeradius fails to start on boot due to priority

I was messing around with FreeRADIUS and MySQL (MariaDB) and it seems FreeRADIUS service can't start properly on startup. But it starts fine using root user or in debug mode (radiusd -X) and works ...
3
votes
1answer
536 views

How many user/supplicant certificates are needed for WPA2 enterprise on a small network?

I am running WPA2 enterprise for wireless access and I followed the instructions in /etc/raddb/certs/README and the freeRadius site howto. I also read the instructions in the privacywonk site. The ...
3
votes
1answer
2k views

Configure Freeradius to check a connecting user against multiple LDAP groups

I'm setting up a Cisco ASA as a client vpn server. The appliance is relying on freeradius to authenticate the users. Freeradius has in turn been configured to query OpenLDAP. The modules/ldap file ...
3
votes
4answers
2k views

802.1x PEAP GPO that trusts self-signed CA certificate

I am working on a Freeradius backed 802.1.x authentication infrastructure for our wireless clients. I am using a rather generic Freeradius configuration with EAP-PEAP. Our clients are predominantly ...
3
votes
0answers
270 views

Multiple Valid Certificates in Windows 7 breaking Wired 802.1x Deployment

I have a Wired 802.1x deployment using TLS machine authentication on Windows 7 (built-in 802.1x supplicant) with the necessary certs (FreeRadius v2.2.3 generated on Linux). Cisco C2960 POE switch is ...
3
votes
1answer
2k views

Auth-Type :- Reject in RADIUS users file matches inner tunnel request but sends Access-Accept

I have WPA2 802.11x EAP authentication setup using FreeRADIUS 2.1.8 on Ubuntu 10.04.4 talking to OpenLDAP, and can successfully authenticate using PEAP/MSCHAPv2, TTLS/MSCHAPv2 and TTLS/PAP (both via ...
2
votes
2answers
504 views

Meraki's Accounting-Requests to RADIUS server

I'm running a RADIUS server with some Meraki APs, the process of Authentications is fine... But it seems that the Meraki Cloud Controller is just sending the authentication packets and not the ...
2
votes
2answers
277 views

freeradius two factor without factor concatenation

I have a cisco router providing an SSL VPN server which is talking to freeradius, which in turn uses pam and two pam modules (sss & yubico) to provide two factor authentication for the VPN. All ...
2
votes
1answer
239 views

Allowing multiple IP addresses for a single VPN user

Currently for one of the company I am using ASA 5505 as an VPN server with freeradius (mysql module) as an authentication backend. User authenticatin is based on the group password, user password ...
2
votes
1answer
937 views

Debian build the freeradius package with unixodbc support

Here is what I am trying to achieve, we want to install freeradius using a Microsoft SQL backend. I read on the internet that we need to achieve this goal using the unixodbc driver. I am able to set ...
2
votes
1answer
3k views

Accounting setup in freeradius with mikrotik and the “always” module

I have a freeradius setup that is being used to provide authentication for users on a wireless network. The access points are all Mikrotik hardware and the users are connected 24/7. We've been ...
2
votes
0answers
57 views

FreeRADIUS using Active Directory integration broken without any traces

I've a FreeBSD 10.0 server running FreeRADIUS 3 and things got broken without any apparent reason. I'm using Winbind from Samba4 to authenticate with ntlm_auth. I've done some debug to solve the ...
2
votes
0answers
89 views

FreeRadius Server: RadGroupReply attribute for maximum connected users?

I have a FreeRadius server and I'd like to set a limitation for the number of users connected to a specific NAS. My current set up is that every user that connects to a certain NAS is added to the ...
2
votes
0answers
822 views

Dynamic VLANs with FreeRadius, OpenLDAP & Cisco WLC

Currently have a FreeRADIUS 1.1.6 server authenticating users from OpenLDAP which are stored in the posixAccount account schema. We've now installed a Cisco WLC, and want to authenticate those users ...
1
vote
2answers
77 views

Point of Shared Secrets on RADIUS Servers over a Cisco Switch

I was wondering what the point of Shared Secrets are on RADIUS servers if I set the secret in the Cisco switch configuration. If the supplicant wanting to be authenticated does not have to know it, ...
1
vote
1answer
79 views

FreeRADIUS and Redis Module

I am wanting to use FreeRADIUS with REDIS for authorisation and accounting. I am running FreeRADIUS 3.0.3. I note the rlm_rediswho module, which appears to be used for caching recent accounting ...
1
vote
1answer
352 views

Configuring rlm_rest module in FreeRadius

using FreeRADIUS I need to authenticate RADIUS users against a web backend and have been attempting to use the rlm_rest module to do it. See here. In my site configuration I have something like this: ...
1
vote
2answers
737 views

Freeradius: Assign Group to User based on Nas-IP-Address

I wonder if anyone can help me. The goal is to assign different users different ip address based on the AP they connect to. I cannot statically set this as users will travel and end up connecting ...
1
vote
1answer
824 views

Reload Freeradius clients without restart the service

Is there a way to reload the Freeradius clients configuration without restarting the service? I'm using: Ubuntu Server 12 Freeradius 2.1.10 MySQL v5.5.20 (I'm storing the clients in the "nas" table) ...
1
vote
2answers
5k views

Freeradius authentication failed for unknown reason

I followed this instruction to force freeradius to use mysql database. and run freeradius in debug mod. but it rejects all authentication. mysql database : mysql> select * from radcheck; ...
1
vote
1answer
5k views

Cannot log into my RADIUS protected wireless connection. Here's the LOG contents

As soon as someone tries to connect to my network, this appears in the log: Tue May 3 15:58:40 2011 : Error: TLS Alert read:fatal:unknown CA Tue May 3 15:58:40 2011 : Error: TLS_accept:failed ...
1
vote
1answer
701 views

Can freeradius bypass authentication for one realm only?

I have a question similar to this one, but without the VLAN complications. How can(?) I configure FreeRadius 1.x to allow any combination of username/password for one realm only? If FreeRadius 1.x ...
1
vote
1answer
385 views

Write hash password to LDAP when creating a new user

I am working on a project with a central user database system. One of the requirements of the system is that there should be only one set of users for all the application. FreeRADIUS and Samba are two ...
1
vote
2answers
782 views

How to limit user's access to a specific NAS?

I'm new to RADIUS and I have just set up a very basic FreeRADIUS server for 802.1x (WPA). I use EAP, MySQL as backend with daloRADIUS as webGUI (for user management, mainly). I got two WiFi networks, ...
1
vote
1answer
682 views

possible? radius server with active directory users and google authentication

We currently have an old RSA token - Radius environment we want to replace Would this architecture be possible? (this works, there are examples on the internet) Linux server Google Authentication ...
1
vote
1answer
176 views

Safe alternatives to using iptables redirection for database

We are using MySQL for our FreeRADIUS user store and accounting database for our web application. I would like to separate the accounting portion of the database, move it to a new server to lighten ...
1
vote
1answer
277 views

Requiring 802.1x login before allowing access to network resources

I have a ZyXel GS2200-24 managed switch, and a free-radius server running on Ubuntu 11.10. Radius is configured and when I log into the switch the authentication goes through Radius. Now, I'm trying ...
1
vote
0answers
71 views

FreeRadius-GoogleAuthenticator-Kerberos Password Change Weirdness

We are using FreeRadius, Kerberos and Google Authenticator to implement two-factor authentication. The two factor auth works fine, both from radtest and from a Watchguard firewall. To log in, a user ...
1
vote
0answers
299 views

Authenticate users from Active Directory with UserPrincipalName or Mail with FreeRADIUS

According to this documentation: http://deployingradius.com/documents/configuration/active_directory.html ; FreeRADIUS can authenticate Active Directory users using Samba's ntlm_auth, and in fact it ...
1
vote
0answers
155 views

Can't run freeradius as a service

I have a radiusd server on a virtual machine, it's already configured and working when I issue "radiusd -X" aka debug mode. My only issue is that when I try to run it as a service it fails... Here's ...
1
vote
1answer
607 views

TLS from Radius for Wifi is rejected by Win7

We do have the following Setup at our company Synology RS812+ hosting LDAP, RADIUS, DNS (Version DSM 5.0-4458 Update 2) 2*Cisco Wifi APs WAP561 (Firmware 1.0.3.4) Cisco Router ISA500 (Firmware ...
1
vote
1answer
272 views

l2tp/pptp + freeradius (accounting information only gets updated on disconnect)

I have a basic PPTP/L2TP setup that uses a remote freeradius server with mysql. Issue is that when a user gets connected to the vpn and as long as the user stays connected (could be hours), no ...
1
vote
0answers
77 views

Checking Statement of Health (NAP) info on Linux using Dhcp and Radius

I have a Linux DHCP server and windows clients. I want my DHCP server to assign an IP address from a network let's say 10.6.3.0/255.255.255.128 if the client has it's firewall enabled or an IP address ...
1
vote
1answer
80 views

Replacing a Freeradius library

I have a freeradius 2.0.4 server i want to update.it has been running without interruption for 2 years. My update consists only in updating the chap module without creating a new one. To avoid ...
1
vote
1answer
518 views

freeradius server adding additional check

I successfully managed to deploy a freeradius server and created a python script which does an additional check on the user (incoming request). I checked the internet (resources for freeradius are ...
1
vote
1answer
365 views

Howto change the default radius logging path for accounting?

I have freeradius 2.1.12+dfsg-1.2 working and logging accounting packets to /var/log/freeradius/radacct/detail-20130401. However I need to tail the log and I want to ideally tail a single log file ...
1
vote
1answer
532 views

Cisco 3750 switch wont transmit radius request to server

We have a radius server running on our lan and i am able to authenticate against it through direct link to the server. However when we want our clients to connect through our switch (cisco 3750 ...
1
vote
0answers
432 views

FreeRadius external authenification script

I am trying to configure FreeRadius to work with my external authentification script. I have a custom module exec myscript { wait = yes shell_escape = yes program = ...
1
vote
0answers
128 views

authentication of VM's using PPPoE

I have two VM's running on Ubuntu box.Their name and IP addresses are give below. nas 192.168.129.153 home_user 192.168.129.152 I establish a ppp connection ...
1
vote
0answers
404 views

Debian 6.0.3, Freeradius 2.1.10, PostgreSQL 8.4 High memory Usage

We are running a Freeradius server on a VMware server and we have a high memory usage that I am trying to troubleshoot. We are running the PostgreSQL 8.4 as the database backend on the same server for ...
0
votes
2answers
417 views

What is the best methodology for managing backups of configuration files on unix/linux systems?

Hey Serverfault community, So what are the best practices for managing backups of various configuration files on a production unix/linux systems? for example, (and why I am asking). I am part of a ...
0
votes
2answers
1k views

About radiusclient command

I have installed freeradius server 2.1.12 and freeradius client 1.1.6 on different virtual machine (redhat linux) ,and tested the server using radtest which is running . I have set up the connection ...
0
votes
1answer
446 views

Where can I find the users file for FreeRADIUS in Ubuntu?

I'm using Ubuntu 10.10. I'm trying to learn how to configure a RADIUS server, but I'm having trouble with creating new users to authenticate. Almost all of the tutorials I've found online mention ...
0
votes
1answer
143 views

FreeRADIUS clients to access service with username and password with access periods

I am using freeradius/mysql/daloradius. I need my customers to be able to login using a username and password that they signed up with and at the same time give them different access periods. How do ...
0
votes
1answer
780 views

Monitor freeradius for failed login attempts and trigger email to user

We have 2 freeradius authentication servers which service around 12k users. Users often enter incorrect credentials and this causes significant strain on the helpdesk. I'd like to write a script to ...
0
votes
1answer
58 views

How to force JSON when using FreeRADIUS REST Module

I have compiled in JSON support to FreeRADIUS 3.0.2 however I note that if I configure authorisation to use POST it is sending RADIUS attributes encoded as application/x-www-form-urlencoded Is there ...