Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.
0
votes
0answers
16 views
Restrict users to one device Windows NPS
I have NPS/RADIUS set up with Aerohive APs.
There are three SSIDs, Prod, iPad and Guest. There is a wireless profile pushed out by group policy which allows domain computers to connect to the Prod ...
0
votes
0answers
16 views
Open Mesh - Cloudtrax radius configuration with Microsoft NAS server
Does anyone know how to configure Cloudtrax (using wifi Open Mesh AP) radius configuration to authenticate to Microsoft Radius (NAS) server? Any guide, any manual?
I configured Cloutrax to use my own ...
-1
votes
0answers
18 views
MPPE-Send and Receive key derivation from MS-CHAPv2 [closed]
I am trying to get the MS-MPPE-Send-key and MS-MPPE-Recv-key from the MS-CHAPv2 challenge material. I am able to follow the RFCs 2548 3078 and 3079 to the step of getting the GetNewKeyFromSHA() it is ...
0
votes
1answer
33 views
PAM configuration for MSCHAP for radius/tacacs
I would like to know how to enable MSCHAP for radius or tacacs.
Please help.
0
votes
0answers
17 views
NPS as a RADIUS not sending response to firewall
We are trying to setup our DC at a remote site to authenticate VPN connections for the firewall. I have added the role and configured the policy but our clients receive "Authentication Failed".
In ...
0
votes
0answers
265 views
How to do a COMPUTER (not user name) 802.1x (RADIUS) authentication with wpa_supplicant in Ubuntu 12.04?
In my corporation, NPS policy does not use AD username/password authentication, for it's too much less secure.
For some laptops and PCs, Ubuntu 12.04 x86 desktop edition is deployed. I found that ...
0
votes
1answer
39 views
What decides what tunnels inside EAP-TTLS?
If EAP-TTLS is a EAP method that establishes a TLS tunnel, what goes in the tunnel? It could be another EAP method, but it could also be PAP. What decides? The server, the supplicant, or do they ...
0
votes
0answers
83 views
Windows 7 client unable to connect to Cisco Wireless Access point
My windows 7 pc is unable to connect to Cisco's Aironet 1040 AP(autonomous)
AP is configured to use EAP with local RADIUS server.
AP debug messages indicates RADIUS server rejected Windows client ...
0
votes
0answers
91 views
HP v1910 - can't choose RADIUS scheme in AAA
According to HP 1910 Switch Series User Guide-R1511 (http://bizsupport2.austin.hp.com/bc/docs/support/SupportManual/c02965327/c02965327.pdf) after configuring RADIUS scheme you should be able to ...
0
votes
1answer
33 views
How to compute CRC in radius response
I have two different proprietary software, one is radius module for billing, second is phone station pbx.
When client doing a call, pbx sends radius auth packet to the billing. And billing answering.
...
0
votes
0answers
47 views
Modify radius response with proxy-freeradius
I need to modify radius auth response, between two my device.
Its phone pbx which send radius auth request, and my billing which answer.
Problem is: billing answering like h323-credit-time=1800, but ...
0
votes
0answers
72 views
Can RRAS+NPS handle Access-Challenge replies from a remote RADIUS server?
When using NPS to forward connection requests to a remote RADIUS server, how can I get NPS to correctly handle Access-Challenge responses from RADIUS?
Background: I'm developing a FreeRADIUS plugin ...
0
votes
0answers
41 views
Access point RADIUS config using wrong user
I've configured a RADIUS server in IAS for my wireless access point. My client can't connect to it because it's not using the right user name for authentication, it's using my email address. Our ...
0
votes
0answers
72 views
Short Lifing CRLs for NPS EAP-TLS Authentication?
I got a question which i'm unable to find an answer for on any official MS ressource.
Image a CA with realy short lifing CRLs (like 1 day). The CA is used only for two purposes: creating NPS ...
0
votes
0answers
36 views
Remote RADIUS Server Marked as Unavailable — for how long?
I have a Windows Server 2008 R2 Network Policy Server (NPS) configured to use a remote RADIUS server. In the event that the remote RADIUS server doesn't respond to 5 (configurable) consecutive ...
0
votes
0answers
68 views
PAM error on reboot of the RADIUS client
I have a debian squeeze machine that acts as RADIUS client talking with the Freeradius server. I have configured PAM on the client, so made following changes.
Added radiusd to /etc/pam.d which ...
0
votes
0answers
47 views
RADIUS authentication using wrong login credentials
I have a RADIUS auth AP that used to work and I don't know what changed. My auth server is IAS on a 2003sp2 DC. I look at the logs and I think I have a clue: the username my clients are attempting ...
2
votes
1answer
99 views
Allowing multiple IP addresses for a single VPN user
Currently for one of the company I am using ASA 5505 as an VPN server with freeradius (mysql module) as an authentication backend.
User authenticatin is based on the group password, user password ...
0
votes
0answers
165 views
Multiple SSID with Radius authentication
I'm currently deploying wireless network on my enterprise.
I need to use Radius to authenticate users, everything works fine when I only have 1 SSID. But I need to deploy multiple SSID, many using ...
1
vote
0answers
145 views
FreeRadius external authenification script
I am trying to configure FreeRadius to work with my external authentification script.
I have a custom module
exec myscript {
wait = yes
shell_escape = yes
program = ...
0
votes
0answers
26 views
FreeRadius securing the service
radiusd -v
radiusd: FreeRADIUS Version 2.1.12, for host i386-redhat-linux-gnu, built on Oct 3 2012 at 01:20:08
I have the firewall blocking ALL ports but allows the IPs of the VPN servers to ...
0
votes
0answers
75 views
sudo asking for password twice when using rsa securid on debian server
I have a Debian server setup to authenticate using RSA securid via Radius. The problem I am seeing is that i am being asked for my password twice for users that are not authenticating with Radius. An ...
4
votes
0answers
52 views
Network Policy Server Granular Time Restrictions
I am configuring NPS as a RADIUS authentication source for my wireless clients.
I am trying to differentiate between school hours and after hours as I need to connect certain users to a different ...
0
votes
0answers
32 views
Questions about fiber and a wishlist [closed]
So I am looking to create a wishlist of what our company may want to implement in the future should we get money for grants. I was wondering if anyone could make recommendations to actual ...
1
vote
0answers
269 views
openvpn refusing connections with freeradius
I installed openvpn and freeradius from yum and I installed the radiusplugin_v2.1a_beta1.tar.gz but I am having connection issues with the error:
XML-RPC: ConnectionRefusedError: 10061: No connection ...
0
votes
0answers
127 views
PLUGIN_INIT: plugin initialization function failed: [OpenVPN]
Jan 7 21:50:13 vpn openvpn[29855]: OpenVPN 2.2.2 x86_64-unknown-linux-gnu [SSL] [LZO2] [EPOLL] [eurephia] built on Jan 4 2013
Jan 7 21:50:13 vpn openvpn[29855]: NOTE: the current --script-security ...
1
vote
0answers
156 views
Cisco ISE Wlan user authentication fails for users with umlaut
We have setup a Cisco Identity Services Engine to manage WLAN access for our users.
Access should be granted to users from a specific Windows Active Directory group.
This works fine for users having a ...
0
votes
1answer
151 views
Using NPS to restrict access to WLAN
We currently have one WLAN that only domain users can connect to. We will be adding a guest WLAN and would like all non-domain machines to use this, even if a user has a domain account.
We have set ...
3
votes
1answer
231 views
Registation or Guest VLAN for 802.1x via Microsoft NPS
I am currently working on a Microsoft NPS solution to provide 802.1x MAC authentication for wired and wireless clients along with providing a VLAN for the clients to be moved to.
It currently works ...
0
votes
0answers
90 views
Using PHP to connect to RADIUS works on one server but not another
I have a fleet of webservers that server a LAMP webapp broken into multiple customer apps by virtualhost/domain. The platform is Ubuntu 10.04 VM + PHP 5.3 + Apache 2.2.14, on top of VMware ESX (v4 I ...
0
votes
0answers
45 views
Network Role based routing
Apologies my networking skills are a tad rusty. I'm looking for a way to setup a system that gives me the ability to setup Role-based access to specific network resources. For example, i have three ...
1
vote
1answer
253 views
Machine account authentication on Radius server
My workstation is under Linux. I have an Active Directory domain controller + Radius server on Windows 2008.
I can verify user account 'radius-01' using 'radtest' tool:
$ radtest -t pap radius-01 ...
0
votes
0answers
104 views
Best VPN solution connected to a RADIUS server [closed]
I'm trying to implement 5 vpn servers across the world. I have one centralized RADIUS server up and running in UK to handle user accounting.
So, I was wondering what would be the best open source vpn ...
0
votes
0answers
63 views
How to create user/pass in Radius for Openvpn server [closed]
How to create user/pass in Radius for Openvpn server
please help
0
votes
0answers
139 views
Squid authentication through freeRADIUS
I'm experiencing a strange behavior with Squid and freeRADIUS. I can clearly see in Radius's debug mode (radiusd -X) that radius is sending access-accept packets to Squid but Squid rejects my client. ...
2
votes
1answer
166 views
PEAP validation against a different, secondary domain?
Probably a little bit confusing, so let me explain the situation.
Our company wants to implement a corporate wireless LAN with PEAP authentication. Unfortunately, someone made a big mistake in our ...
0
votes
0answers
180 views
Freeradius configuration file variables
I need to add script execution in authorize section of freeradius config.
This script uses command-line arguments with mysql server credentials.
I'm using %{config:section.subsection.item} to get ...
0
votes
1answer
247 views
Windows 7 Wifi Certificate Trust Anchor
When attempting to connect to our company wireless while not on the domain, I receive a message saying that our RADIUS server provided a valid certificate issued by our root CA, but that the root CA ...
0
votes
0answers
63 views
sending “802.11 status code 17 AP busy” from Radius
Do you think it is possible to send a "802.11 status code 17" during Radius EAP authentication phase according to the user from Radius?
Regards,
ps: Association denied
because AP is unable to handle ...
6
votes
1answer
343 views
WPA2 Enterprise without a Client-End Certificate
This question is practically identical to this question, but the difference being that the authentication server is freeRADIUS on Ubuntu and the access-points are DD-WRT.
Additionally, I would like ...
1
vote
1answer
669 views
Use RADIUS authentication with Remote Desktop Services
I have a PhoneFactor implementation that I love and cherish for VPN access. PhoneFactor provides us a RADIUS server that checks against an approved-users list and our Active Directory implementation, ...
1
vote
0answers
90 views
authentication of VM's using PPPoE
I have two VM's running on Ubuntu box.Their name and IP addresses are give below.
nas 192.168.129.153
home_user 192.168.129.152
I establish a ppp connection ...
0
votes
2answers
150 views
What is the best methodology for managing backups of configuration files on unix/linux systems?
Hey Serverfault community,
So what are the best practices for managing backups of various configuration files on a production unix/linux systems?
for example, (and why I am asking). I am part of a ...
0
votes
0answers
51 views
interpreting a RADIUS packet
I am trying to interpret a RADIUS packet.
0x04 12 00 2e 01 12 32 11 43 c1 23 43 bc 23 11 54 f1 ad 1a 16 28 06 00 00 00 02 29 06 00 00 00 11 2a 06 ff ff ff ff 2b 06 ff ff ff ff
I have gotten this far ...
1
vote
1answer
550 views
Using SHA1 user password fields in freeradius radius server
I have proprietary web application which stores user password in form of sha1$79b2c$b3704ec5703ef28ded379cf6c6de4c4160aa029b. This is a salted sha1 hash.
I want to use this presaved information for ...
0
votes
0answers
18 views
Connecting two VM's connected to a bridged network using pppd [duplicate]
Possible Duplicate:
Communication between two systems using pppd
I have two Virtual Machines (both Ubuntu 64-bit machine) connected to a bridged network.The name and ip-address are give ...
3
votes
1answer
461 views
How do I go about Improving wireless security at the office (Radius? Certs?)
EDIT 1:
Our environment is mixed, majority OSX with a few Windows and Linux boxes. More importantly, Android and Apple cellphones will also need wireless access on a regular basis.
We have a redhat ...
-7
votes
1answer
98 views
networking and authentication
I installed a RADIUS server in my network (Windows 2008) and Active Directory which contains different users; I also have an access point (tp_Link) authenticated on RADIUS server. I am using Windows ...
4
votes
2answers
3k views
Troubleshooting Windows EAP/RADIUS connectivity issues
So, I guess the short version of the question is:
I'm unable to get clients to connect to an enterprise-WPA wireless network after setting up a "new" NPS server and a new CA. After I manually ...
3
votes
1answer
253 views
What are the Precautions to be taken while configuring RADIUS authentication for Routers,Switches & Firewalls [closed]
Have quite a few questions for Implementing Radius for my network devices :
How to safely implement aaa Radius authentication to make sure users have login using LOCAL database incase the Radius ...
