Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

learn more… | top users | synonyms

0
votes
0answers
12 views

High load and Cpu on Radius server- Supplicant issue?

We have a Wireless Lan controller set to authenticate users against (Lucent) Radius server. The username and password is stored in a database. About once a week the cpu on the radius/java process ...
0
votes
0answers
22 views

supermicro ipmi radius attributes

Referencing this old question: Configuring RADIUS or LDAP on Supermicro (ATEN) IPMI Supermicro isn't in FreeRadius's vendor dictionary. So how do I add these attributes and get Supermicro IPMI to ...
1
vote
1answer
23 views

WIFi Authentication with Windows Active Directory [closed]

What would you recommend for scenario. Office with 100 employees multiple device platforms(Apple , Windows and Android). Existing Windows Active Directory on Windows 2008 but not all devices use this ...
0
votes
0answers
7 views

Cisco VWLC redirect page without authentication, radius or dhcp?

I have a virtual Cisco CMX sytem for the tracking of customers in a smalland a virtual Wireless Lan Controller also from cisco, in it's webconfigure I can choose for it to redirect to a webpage we ...
0
votes
0answers
10 views

Multi-factor auth with Kerberos and RADIUS

I am looking for a solution in order to allow a multi-factor authentication for a Kerberos-based logon service. By reading some articles, I found some good references about RADIUS, that provides a set ...
0
votes
0answers
16 views

Setting up Cisco ASA VPN to use both radius and local users

I've got a Cisco ASA setup with L2TP/IPSec VPN, all is working well except for one minor issue. Ideally, I'd like to be able to log on to the VPN using either that RADIUS server users or the local ...
0
votes
0answers
31 views

User-Password is not sent with RADIUS request

I am trying to get my router wifi to authenticate the username and password from an LDAP database on my ubuntu server. I followed the steps mentioned in this tutorial: ...
0
votes
1answer
48 views

FreeRadius configure two different authentication types

Have a particular scenario in that we would like to use FreeRadius to log into switchs using Kerberos credentials and network devices using EAP-TLS. Currently have this configured and working, but ...
0
votes
0answers
23 views

RADIUS + LDAP + Cisco router 1941

I have a unique setup in my data center where I have configured a Radius with LDAP for authentication and authorization in my cisco 1941 router for remote IPSEC vpn users. This works fine and dandy. ...
0
votes
0answers
22 views

Use mail attribute for 802.1x RADIUS authenticatioon with Microsoft NPS

We have run a Cisco WiFi network that uses 802.1x to authentication logins against Active Directory. Employees login using their UPN prefix, and all works well. For various reasons we'd like users ...
1
vote
1answer
69 views

HAProxy and Radius

I've a following situation: network1 - gate - network2 network2 has several services. network1 has a lot of developers. I need to make access from developers to services with separated access, ...
0
votes
0answers
19 views

RADIUS servers at different sites (member servers at each site) - roles on each server

I have successfully set up a Windows Server SBS 2011 RADIUS server and it works well with our DrayTek router to authenticate domain joined workstations to our office wireless (so that only trusted ...
0
votes
1answer
74 views

radtest no response from outside localhost

I have set up freeradius in a Microsoft Azure VM. When I radtest from 127.0.0.1, it sends Access-Accept. But when I run radtest from another computer, freeradius doesn't respond. I am running ...
1
vote
0answers
26 views

local user cannot login while RADIUS is configured on Cisco Switch 3745

I've configured RADIUS on my switch as below: aaa new-model ! aaa authentication login default group radius local aaa authorization exec default group radius local ! radius-server host ...
0
votes
0answers
6 views

NPS with Microtik Routerboard 750GL

I want to configure Microtik Routerboard 750GL with NPS to grant access to Internet for our wifi clients. Clients need to be authenticated via active directory using nps. I have configured routerboard ...
0
votes
1answer
56 views

Apache & Radius & OTP

We have a Radius Server which authenticates our Users for our VPN solution. It additionally uses OTPs which are sent to the mobile phone. Im trying to find a way to use Radius Auth & OTP to ...
0
votes
0answers
53 views

Freeradius Authentication Fails only from Wireless router and works with radtest

I have installed and configured freeradius 2. When I test my freeradius installation using radtest, everything works fine. Locally The test command I executed was this one: radtest mario thepass ...
1
vote
1answer
207 views

SSH Authentication using RADIUS + Google Authenticator

I'm trying configure my SSHD's to authenticate users using FreeRadius. The FreeRadius server needs to first require a valid OTP using Google Authenticator, and then verify the system account password. ...
1
vote
0answers
122 views

NPS/RAIDUS Authentication for Wifi and certificates for non trusted server

I'm trying to setup an NPS server as RADIUS server for Wifi network of employers of my company. All mobile devices could connect to this networks using their domain user/pass. My problem is to let ...
3
votes
0answers
55 views

Authentication and logging of users for a Wireless ISP?

I have to upgrade a Wireless ISP's (WISP) network. Their current setup consists of a router (Mikrotik RouterBoard 1100AHx2), Ubiquiti Rockets (with sector antennas) for clients, and Ubiquiti ...
0
votes
1answer
95 views

NPS Server 2012 with ASA as Radius client not working, Server 2008 Working

for some time I have been using 2008 R2 as my Radius server and I have a Cisco ASA FW who is configured as Radius client and working ok. I have introduced another Windows 2012 DC, and also configured ...
0
votes
0answers
203 views

Windows Server 2012R2 RADIUS (wifi) clients won't accept bought wildcard certificate

I've been managing the NPS Server for a while and thought it was time to treat it a valid SSL certificate. The setup I bought a wildcard SSL certificate from comodo, compiled it to an .pfx ...
0
votes
0answers
46 views

Windows NAPS RADIUS server rejecting client

I have a Windows 2012 R2 VM with NAPS installed. I also have a Zyxel ASA and an AP that are configured to authenticate over RADIUS for one particular SSID. In the logs, I'm seeing that the ASA is ...
0
votes
1answer
100 views

For 802.1x PEAP RADIUS Authentication, do you use a different certificate per server?

Consider an environment that uses 802.1x PEAP authentication via RADIUS. Typically, this is to authenticate wireless clients. In this environment there are multiple RADIUS servers and clients will be ...
0
votes
1answer
130 views

OATH TOTP with Windows NPS Server?

I'm trying to set up multi-factor authentication for AWS WorkSpaces using AD and OATH TOTP (e.g. Google Authenticator). In the AWS AD Connector config you can set up the RADIUS server's IP, port and ...
0
votes
0answers
31 views

Protocol used between a RADIUS client and a computer?

I can't find documentation about the protocol used when a computer wants to reach a network with 802.1x. RADIUS client (switch, access point) use UDP/1812-1813 to communicate with RADIUS server. How ...
0
votes
0answers
65 views

Purchasing a certificate for Freeradius / WPA-Enterprise

I'm moving my WiFi to WPA-Enterprise, using a Freeradius server that authenticates with our Samba 4 directory. I'm currently using a self-signed certificate, but want to move to a purchased ...
1
vote
2answers
231 views

What are the risks of adding third-party Root CA certificate into NTAuth Store?

What are the risks associated with import of third-party Root CA certificate into the Enterprise NTAuth Store in Windows domain except that the CA is then trusted to issue certificates? This is for ...
1
vote
2answers
34 views

Radius clients with different authentication criteria

I can't seem to find a good tutorial on how to set my network policy for one of my radius clients. I'd like my radclientA with policyA to authenticate and radclientB with policyB to authenticate. ...
0
votes
0answers
129 views

Server 2012 NPS Server not authenticating IKEv2 requests

I am having a weird problem regarding NPS Server when I upgraded my vpn servers from server 2008 R2 to Server 2012 R2. Actually in my infrasturcture I have a Windows 2008 R2 based AD and in its domain ...
1
vote
0answers
16 views

Network Policy not evaluated for forwarded authentications

I'm having a problem with NPS connection policies in combination with forwarded RADIUS requests - the connection policy does not seem to be evaluated? Our domain has several one-way trusts. I have a ...
0
votes
0answers
56 views

Creation of a guest Wireless network 802.1X - easy to configure out of the box on clients (android, ios, computers,..)

I would like to create a Guest wireless network with 802.1X (WPA enteprise). On the client side, it must be easy to configure, so the users can enter a login and password during the authentication ...
0
votes
0answers
17 views

'Generic' Certificates for RADIUS authentication/Encryption (weird?)

Situation: I have a test environment with Server 2008 that's a DC and has NPS for RADIUS authentication/encryption for wireless, and AD CS installed for the self signed cert. As it stands now, my ...
0
votes
1answer
622 views

NPS/RADIUS authentication across one-way trust

I'm trying to set up Windows Network Policy Server to allow RADIUS authentication in a multiple forest scenario with one-way trusts. We have several domains (each in a single domain-forest) containing ...
1
vote
0answers
92 views

Same VLAN for LAN only and Internet users on 802.1x network with pfSense as gateway

I am creating an ISP for a student residence. The LAN is already there and working, with several CISCO switches. I want to provide Internet by a secured and automatic way to those who pay for it ...
0
votes
0answers
32 views

How does EAP-SIM and RADIUS work together?

I would like to know how does EAP-SIM and RADIUS work together. Assume we have something like this: [client-1]----+ | [client-2]----+----[AP]----------[RADIUS Server]------------[HSS] ...
0
votes
0answers
41 views

Unable to use Radius server out of LAN

I want to set up WPA2 Enterprise for my TP-Link TL-WR886N router (official firmware). Tried to use an radius server in LAN and it is working. Since the power supply is not steady (I have UPS for the ...
2
votes
1answer
268 views

EAP-TLS for Wireless with Active Directory

My question is more from a conceptual point of view, rather than implementation (even though I'm asking about proprietary protocols and products). Assuming I have users and credentials set up in my ...
0
votes
0answers
88 views

OpenVPN + FreeRADIUS Authentication Error

Trying to set up a OpenVPN server with FreeRADIUS server running on the same machine. All servers are running but I'm getting errors with authentication when the end user logs on VIA OpenVPN client. ...
0
votes
0answers
294 views

Error using SHA256 certificate for RADIUS server for use with Ubuntu Unifi/Wireless 802.1x 802.11 network

We have an established wifi network with Unifi, setup as wpa2-enterprise with a Windows Server 2008 R2 RADIUS host. Our CA server crashed, which didn't seem to cause any trouble with phones ...
0
votes
0answers
126 views

specific IP Attribution with isc-dhcp-server with freeradius authentication

I would like to assign specific address to my clients, regarding their radius authentication. For exemple, user1 (group user) authenticate on radius, dhcp gives him 192.168.1.1 as IP user2 (group ...
1
vote
0answers
145 views

Using airport extreme as an AP with true bridge mode (forwarding 802.1x auth)

So here is my setup. I have a Router (Fortigate) 4 airport Extreme, and a radius/ldap server on a distant server. I want my user to authenticate with the radius or LDAP server, and be able to create ...
3
votes
0answers
360 views

Windows machines cannot connect to Radius Wifi

Environment Background: 4 Domain Controllers, DC01 DC02 DC03 DC04 DC01 is my PDC DC02 is my NPS Server The other two are load balancing and site specific. I'm using a Ruckus Zone Director with Ruckus ...
1
vote
1answer
443 views

Debian Samba share Authentification with RADIUS server

I'm trying to configure Samba (apt-get install samba) to authenticate users using a RADIUS server and i cannot find anything useful. Is it possible ? I tought i could set Samba to use the PAM ...
0
votes
0answers
79 views

An error occured during the Network Policy Server use of Extensible Authentication Protocol

It has been almost two weeks to get my radius server up and running. I think i have run in almost to all the issue known to Radius :). Am guessing this to be a Certificate issue, Please go through ...
4
votes
1answer
4k views

Tracing Untraceable AD Account Lockouts

A user (we'll call them 'username') keeps getting locked out and I don't know why. Another bad password is logged every 20 minutes on the dot. The PDC Emulator DC is running Server 2008 R2 Std. ...
0
votes
0answers
177 views

RADIUS server does not call a custom script

I do have a RADIUS server which called a custom script for authentication in the past. In the /etc/freeradius/sites-enabled/default, I modified the following lines to archieve this: authorize{ ...
0
votes
1answer
136 views

FreeRADIUS 3 and Wildcard Certs

I am setting up a new FreeRADIUS server here on campus, jumping from v1 to v3 (I was not here when the original was setup). Things seem to be working fine, but I do not understand how the certificates ...
1
vote
1answer
59 views

mod_auth_radius secure over https?

mod_auth_radius README file says: Using static passwords & RADIUS authentication over the web is a BAD IDEA. Everyone can sniff the passwords, as they're sent over the net in the clear. If I ...
0
votes
1answer
194 views

Active Directory / Freeradius / ntlm_auth / mail attribute

I am currently configuring a linux server with Freeradius to have our clients authenticate against our Active Directory for our WiFi-network. The goal is to have our users use the e-mail address that ...