Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

learn more… | top users | synonyms

2
votes
0answers
24 views

Tracing Untraceable AD Account Lockouts

A user (we'll call them 'username') keeps getting locked out and I don't know why. Another bad password is logged every 20 minutes on the dot. The PDC Emulator DC is running Server 2008 R2 Std. ...
-1
votes
0answers
9 views

Osx 10.6.8 TLS authentication issue with 2008 Network Policy Server

So I recently switched my company's campus over to our new 2008 Radius Servers. We use dot1x authentication using certs to authenticate to our network. All of our devices work except for older macs ...
0
votes
0answers
15 views

RADIUS server does not call a custom script

I do have a RADIUS server which called a custom script for authentication in the past. In the /etc/freeradius/sites-enabled/default, I modified the following lines to archieve this: authorize{ ...
0
votes
1answer
17 views

FreeRADIUS 3 and Wildcard Certs

I am setting up a new FreeRADIUS server here on campus, jumping from v1 to v3 (I was not here when the original was setup). Things seem to be working fine, but I do not understand how the certificates ...
0
votes
0answers
7 views

WiFi security using IEEE 802.1X - how secure is it? [migrated]

My company's set-up involves a single AP (TPlink) that is configured to authenticate clients using RADIUS. All works well, but: on a regular WPA/WPA2 network, once you have the PSK, you are able to ...
1
vote
1answer
18 views

mod_auth_radius secure over https?

mod_auth_radius README file says: Using static passwords & RADIUS authentication over the web is a BAD IDEA. Everyone can sniff the passwords, as they're sent over the net in the clear. If I ...
0
votes
0answers
41 views

Active Directory / Freeradius / ntlm_auth / mail attribute

I am currently configuring a linux server with Freeradius to have our clients authenticate against our Active Directory for our WiFi-network. The goal is to have our users use the e-mail address that ...
0
votes
0answers
38 views

NPS Radius wireless authentication only for domain computers

Is it possibile to setup a Windows NPS role to grant only Domain PC to wireless access? I want to still check for a valid domain user account, but I would like to restrict access only to domain ...
0
votes
1answer
99 views

EAP-PWD with FreeRADIUS 3

I'm trying to setup EAP-PWD using FreeRADIUS 3. However, I can't get it to work and documentation is virtually non-existent. Thus, I don't know whether the problem I'm running into is a ...
0
votes
0answers
33 views

Is it possible to use RADIUS with client certificate for Checkpoint VPN?

I have Checkpoint Gaia R77 acting as VPN gateway, and Microsoft NPS acting as RADIUS. Is it possible to use client certificates for VPN authentication against RADIUS server? I know for sure that ...
1
vote
1answer
45 views

NPS server Active Directory registration & WIFI RADIUS

Background (I'm new to this, so bear with me): So, I set up an NPS server vm in an AD domain to try out RADIUS client WAPs. The NPS is installed alongside an AD CS server (enterprise, plus one ...
0
votes
0answers
75 views

RADIUS w/ NPS, Sonicwall, and Meru Wireless

EDITED 3/23: I've been trying to configure a DS/NPS->Sonicwall->Meru Controller>Client RADIUS Wifi solution and I haven't had much success on the sonicwall side. I've shortened all shared secrets to 8 ...
0
votes
0answers
100 views

Microsoft NPS Radius Proxy - Framed-IP-Address Empty

I'm trying to use Microsoft's NPS as a radius proxy, but for some reason it's not forwarding the Framed-IP-Attribute in the accounting requests. I have a Meru wireless controller, Smoothwall web ...
0
votes
0answers
28 views

Windows 2008 Radius Client

I'm trying to search for a way to have Windows 2008 as a Radius client to authenticate itself with the corporate Radius server. AD is currently out of the picture, and my superiors want me to look ...
0
votes
1answer
56 views

Does “aaa accounting commands” not support radius?

When I issue this command: aaa accounting commands 15 default start-stop group myradiusgroup I get this error: %AAAA-4-SERVNOTACPLUS: The server-group "myradiusgroup" is not a tacacs+ server group. ...
1
vote
0answers
38 views

Authenticating devices instead of users via PEAP/Radius

Our Cisco Aironet AP uses Radius to authenticate against our Active Directory via our Network Policy Server (NPS). For my users, on their domain-managed laptops and BYO devices (such as laptops, ...
1
vote
1answer
93 views

How do I use a domain account to connect to a MSSQL server for NPS accounting?

I'm trying to connect a Server 2008 R2 NPS to a MSSQL server for logging accounting data and I'm running into issues. I configured NPS Accounting through the "Configure Accounting" wizard and, using ...
-3
votes
2answers
35 views

How to bind with RADIUS port i.e.1812? [closed]

I am trying to connect to RADIUS port in one of my project. The radius port is 1812 opened on RADIUS server. I added this port to ip table (ip natting) using /sbin/iptables -t nat -A PREROUTING -p ...
0
votes
1answer
306 views

radclient:: Failed to find IP address

I installed freeradius on CentOS 6.6 and I have configured the files /etc/raddb/clients and /etc/raddb/users. I am trying to test the server by this command : radtest Aicha passme 127.0.0.1 100 ...
2
votes
0answers
120 views

Using Windows NPS for Cisco router aaa authentication - is this safe?

I setup RADIUS authentication on a Cisco router and pointed it to a Windows NPS. Now I can ssh into the router my with AD account YAY. But now that I got it working I'm going over the settings to ...
1
vote
1answer
103 views

LDAP authentication using RADIUS server

I have a RADIUS server with a custom authentication method. I have a Mysql-Database with passwords of a Django CMS which are hashed in PBKDF2_SHA256, so I had to write a custom authentication script. ...
2
votes
1answer
141 views

Radius Client IP Address when setting up Wifi with WPA2 Enterprise?

I have taken over a server setup (as part of my job) which is setup of the following: Server setup with Threat Management Gateway (serving as the firewall) - 192.168.1.1 Server with Domain ...
1
vote
0answers
103 views

NPS RADIUS authentication fails due to user account

We're in the process of migrating our wireless network, adding in 802.11x-based RADIUS authentication. The set up is as follows: Client connects to router01 Client authenticates through RADIUS on a ...
0
votes
0answers
119 views

Server 2012 RRAS - RADIUS client number of authentication retries

I have a Windows Server 2012 system with the RRAS service installed. RRAS works ok, it receives VPN requests and sends them to a remote RADIUS server for authentication. I am trying to configure the ...
3
votes
0answers
35 views

How do I get as much debugging info as possible out of the Network Policy Server (ias) service?

We are trying to authenticate a client on remote vpn, through a Meraki Z1 teleworker appliance. The Z1 is sending a proper request, the Network Policy Server (ias) service is apparently ...
1
vote
0answers
257 views

FreeRadius Error reading /etc/freeradius/huntgroups

I've configured freeradius to use sql, everything was working fine, I was doing some tests with the users, and suddenly I cannot start the debugger because of this error : rlm_preprocess: Error ...
1
vote
1answer
41 views

EAP-TLS: is it possible eavesdropping when sharing client certificate?

I want to know how to share a network of WPA2 enterprise with EAP-TLS, authenticating users with a common certificate. They share the same certificate. I'm afraid they can monitor each other. Is ...
0
votes
0answers
101 views

£ sign in password fails Windows NPS Radius authentication against Sonicwall SRA

We have a Sonicwall SRA server configured to authenticate users using RADIUS to a Windows NPS Server running on Windows Server 2012 R2. It all works fine EXCEPT when passwords contain the "£" ...
1
vote
1answer
357 views

New root CA will not list schema version 2 & 3 certificate templates

I'm trying to decommission a Server 2008 machine that hosts DC, NPS, and CA. I've deployed two new servers to take over as root CA and RADIUS server (both new servers are 2012R2). The new root CA is ...
3
votes
0answers
70 views

SuperMicro IPMI using Windows-based RADIUS (NPS)

I'm struggling to use a Windows-based RADIUS setup (Network Policy Server) with SuperMicro IPMI interfaces. I've found that I need to add vendor-specific attribute H=4, I=4 (Appendix C in the ...
0
votes
0answers
70 views

Poptop unable to authenticate against RSA Authentication Manager via RADIUS

Unfortunately I haven't been able to find an answer to this through Googling, searching Stack sites, etc. Any help provided would be appreciated. I'm setting up Poptop and it needs to authenticate ...
2
votes
1answer
102 views

FreeRadius - Authenticate any User & Password

I am trying to help a facility who's radius server crashed - no recoverable data. The clients are all installed (buried) in vehicles and are not readily accessible (need to tear stuff apart). Access ...
0
votes
0answers
411 views

Configure Mikrotik WPA-EAP to authenticate against local user database

Is it possible to configure a Mikrotik router (RouterOS 6.20) to perform WPA-EAP authentication against the local user database on the Mikrotik? Documentation indicates that all authentication ...
0
votes
0answers
283 views

How to handle 802.1x authentication system with incompatible clients devices?

I would like to split my wired network into multiple VLANs. In order to do that, I think I will use dot1x authentication on my Cisco Switchs (2960S and 2960G) RADIUS will be handle through NPS on my ...
0
votes
0answers
66 views

OpenVPN Radiusplugin AD and the user restriction

Im using FreeRadius which is using Samba4 (AD DC) as the user/password provider. OpenVPN is using Radiusplugin, which use that FreeRadius Server for authentication. This solution work great, but I ...
1
vote
1answer
204 views

Setting up NPS with a certificate that is valid to both AD and non-AD machines

I'm trying to setup an AD server running the NPS service so that both AD and non-AD machines see the certificate as valid when authenticating to the wireless network. I picked up a cert from GoDaddy ...
0
votes
0answers
78 views

Freeradius and Cisco. VPN client public address attribute

Once again I am here with a FreeRADIUS question. I use RADIUS for authentication of my IPSec clients and the NAS is a Cisco router. I want RADIUS to be writing not only the NAS IP address into the ...
0
votes
0answers
30 views

Radius Users grouped by NAS Client

I have searched for many hours about the possibility of FreeRadius separate users by NAS client, but, without success :( I want to separate my users grouping by NAS client, as follow: Nas client 01 ...
0
votes
1answer
408 views

Daloradius / Freeradius mac authentication

I setup a centos freeradius mysql with the frontend daloradius using the steps on this site http://linuxdrops.com/install-freeradius-with-web-based-management-daloradius-on-centosrhel-debian-ubuntu/ ...
1
vote
2answers
183 views

Point of Shared Secrets on RADIUS Servers over a Cisco Switch

I was wondering what the point of Shared Secrets are on RADIUS servers if I set the secret in the Cisco switch configuration. If the supplicant wanting to be authenticated does not have to know it, ...
4
votes
4answers
5k views

Authentication via RADIUS : MSCHAPv2 Error 691

I am working on setting up authentication into an Acme Packet Net-Net 3820 (SBC) via RADIUS. The accounting side of things is working just fine with no issues. The authentication side of things is ...
0
votes
0answers
460 views

Cisco ASA + FreeRadius: Downloadable ACL configuration

VPN users that are using FreeRadius are having access to all VLANs. VPN users using local authentication have local ACLs applied to their access. I need to know what configuration change I need to ...
0
votes
1answer
87 views

RADIUS authentication requests not relayed to RADIUS server

I am trying to set up a RADIUS server for 802.1x NAC over a Cisco IE 3000 Network Switch, using freeRadius to implement it. I know the switch knows where the RADIUS server is because I set up the ...
0
votes
1answer
568 views

Configuring a RADIUS server for 802.1x over a Cisco Switch

I am trying to set up RADIUS authentication over a Cisco switch and I have gone through every tutorial they have. I am able to get the RADIUS server to authenticate when I access the CLI of the Cisco ...
0
votes
1answer
151 views

Can RADIUS offer protection against spoofed MAC addresses accessing resources protected with MAC Authentication

When running RADIUS via WPA2 Enterprise and 802.1x, clients wishing to access the network must provide valid credentials. However, this does not stop malicious clients forging valid clients MAC ...
0
votes
0answers
23 views

Multiple server with Pam radius?

I have an issue with Pam radius . I want to use two radius servers at same time with different databases with Pam_radius I use Open-connect which use Pam authentication . in ...
1
vote
1answer
353 views

Nagios-Plugin “check_radius” missing in Ubuntu 14.04?

Since I asked this question already on askubuntu but nobody answered for a week perhaps here somebody knows the answere ...
0
votes
2answers
410 views

RADIUS-sever: Hashing password before checking

I do have to set up a RADIUS server for authentication with a captive portal of pfSense. Unfortunately, all passwords in the RADIUS' database are hashed with a certain algorithm. I do use a ...
1
vote
0answers
46 views

Troubleshooting 802.1x authentication issue relating to signal strength

My setup: Windows 2008 R2 server with the NPS role configured for RADIUS _PEAP/MSCHAPV2. I have a WPA2 Enterprise network configured on the Ubiquity controller. 3 Ubiquity UniFi LR access points. ...
3
votes
1answer
2k views

802.1x certificates, EAP-TLS, RADIUS and Windows machines

When using 802.1x certificate-based authentication on Windows machines, should I use different certificate for each machine? There is RADIUS server running in the network, the machines use EAP-TLS to ...