Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

learn more… | top users | synonyms

-2
votes
1answer
32 views

802.1x auth without certificate on clients

I'm trying to implement WPA-Enterprise authentication on my UniFi Controller (3.1.10) without the need for certificates on clients. My RADIUS server will be Windows Server 2012R2 with NPS role ...
-1
votes
1answer
50 views

User authentication; PAM or Radius? [closed]

At college I'm part of a group of students that keep a server infrastructure running for the students. Lately we've been having a lot of trouble with the servers, and we decided that it's probably ...
0
votes
0answers
30 views

Exchange Server 2013 and RADIUS server(freeRADIUS2)

I am a student and doing an internship. I have to test Microsoft Exchange Server 2013. I am using Windows Server 2012, I already installed Exchange Server 2013 on it and everything works as intended. ...
1
vote
0answers
54 views

Server 2008 RADIUS on auth non-domain computers

I have read a few articles about the web regarding this, but I seem to be unable to find a definitive answer for my question. I have an Aruba Networks controller configured to hit a RADIUS server ...
0
votes
1answer
65 views

Radius Authentication

I will first tell you a little bit about how I am set up. I have wireless clients connecting to an ARUBA Mobility Controller using a RADIUS server for Authentication. I need to ensure I can get ...
2
votes
1answer
175 views

NPS - RADIUS - Active Directory Authentication

Is it possible to use NPS RADIUS as an intermediary between an application that only supports RADIUS authentication and an active directory server which is used for authentication across the network? ...
0
votes
1answer
102 views

Authentication to Squid proxy with a RADIUS-authenticated client

I want to set up a wireless environment where WPA2-Enterprise is used for authentication to a FreeRADIUS server (using EAP-TTLS or PEAP), and the wireless client is seamlessly routed through and ...
0
votes
1answer
69 views

Authenticate Radius user using pam and ssh [duplicate]

I am able to authenticate radius users using radius server+pam+ssh with creating local user with blank password in linux. Is it possible to authenticate radius users without creating users in local ...
2
votes
1answer
569 views

How to use Calling-Station-Id on a per user basis in freeRADIUS?

I am trying to limit every user to a small set of Mac-IDs in RADIUS, by directly including the appropriate information in the users file. It would be acceptable even if every user was limited to one ...
1
vote
1answer
51 views

Managing Active Directory account access across multiple forests / customers

We do managed IT services for a number of small / medium business. I'm looking to find a solution to manage our access to our clients' AD forest's in a scalable fashion. Right now, we manually create ...
1
vote
0answers
287 views

How do I set up an 802.1X infrastructure for use with OS X and iPads?

At my workplace I have been tasked with setting up machine certificate based 802.1X wireless authentication for our Apple devices. It seems like on the client side this will be handled by Profiles ...
0
votes
1answer
142 views

Freeradius server is not accepting accounting packets through tcpreplay

I am running a free radius server on system A. I am sending test accounting requests using radclient radclient -x systemA acct testing123 from system B. I can see that the radius server recieved these ...
1
vote
1answer
414 views

Setting Up A Windows 2008 NPS Server As A Radius Server For A Cisco AP541N Cluster

I have a cluster of Cisco AP541N access points. I am trying to use the Radius authentication for WPA-Enterprise authentication, but I cannot get the APs to query the server properly. Does anyone ...
0
votes
1answer
79 views

system authentication and radius authentication

I am using CentOS 6.3 and want to enable ssh RADIUS authentication along with Centos system Authentication. Right now my server is firstly authenticated with RADIUS server. And after system ...
1
vote
2answers
266 views

WPA2-Enterprise vs. Captive Portal, which is more preferable?

My school runs our WiFi network on Aruba Controllers, some of the access points are Aruba-branded and is managed. Others are D-Link branded, and need configuration one by one if needed. We run our ...
0
votes
0answers
22 views

How to configure network policy to disallow specific users group access VPN and allow access to cisco devices via telnet? (windows 2008 r2)

I am using radius to authenticate VPN users, and access to Cisco devices. some users allowed to connect via VPN only, others allowed to connect via VPN and access Cisco devices. I want to add other ...
0
votes
0answers
136 views

Openvpn + Freeradius and Framed-IP-Address

I've got this OpenVPN box and a Freeradius one for authentication and I need to set static ip addresses to my users. I'm doing so by pushing Framed-IP-Address in the radius reply. The client ...
0
votes
1answer
161 views

Expired password change through VPN failure

I am setting up some new accounts to be used by some contractors. they are going to connect via VPN to our network. My requirement is to set the password initially and then have them change it the ...
0
votes
2answers
325 views

How to limit user's access to a specific NAS?

I'm new to RADIUS and I have just set up a very basic FreeRADIUS server for 802.1x (WPA). I use EAP, MySQL as backend with daloRADIUS as webGUI (for user management, mainly). I got two WiFi networks, ...
0
votes
1answer
346 views

NPS Policy doesn't to respect the “Control access through NPS Policy” user attribute

I have a Win2K8 server with NPS. I am trying to set my VPN authentication on a FortiGate firewall to authorize users via Radius from my Windows server. I have two policies configured a Connection ...
0
votes
3answers
93 views

How to prevent users from connecting directly to the switch, where the Access point is connected?

I'm about to setup a large wireless network, at a dorm. The hardware I'm using is going to be: HP Procurve E2520-24G-PoE (J9299A) Cisco Aironet 2602i Autonomous Access Point Since the outlets at ...
2
votes
1answer
129 views

How to enable two factor authentication

I am using CentOS 6.3 and want to enable ssh RADIUS authentication. Right now my server is directly authenticated with RADIUS server. I want the server to authenticate with unix credentials first and ...
1
vote
0answers
58 views

Checking Statement of Health (NAP) info on Linux using Dhcp and Radius

I have a Linux DHCP server and windows clients. I want my DHCP server to assign an IP address from a network let's say 10.6.3.0/255.255.255.128 if the client has it's firewall enabled or an IP address ...
0
votes
0answers
95 views

Radius AAA authentication failover

I know this question has been asked on here but I cannot seem to figure this out. I am trying to get radius to failover to local authentication but whenever I turn off radius it won't failover. ...
2
votes
1answer
424 views

Radius connection with windows computers

I have many Ubiquiti's unifi AP connected to a Windows Server 2012 NPS's radius server. I configured security policies for let domain user to connect to local network. I have some trouble with window ...
0
votes
1answer
177 views

Configuring C2950 with 802.1X/PEAP and RADIUS server

I am setting up 802.1X security on a LAN which has a C2950 switch that controls access from the WLAN to the Ethernet LAN. I plan to use PEAP. I read this the Cisco article on configuring 802.1X ...
0
votes
0answers
196 views

Restrict users to one device Windows NPS

I have NPS/RADIUS set up with Aerohive APs. There are three SSIDs, Prod, iPad and Guest. There is a wireless profile pushed out by group policy which allows domain computers to connect to the Prod ...
0
votes
0answers
252 views

Open Mesh - Cloudtrax radius configuration with Microsoft NAS server

Does anyone know how to configure Cloudtrax (using wifi Open Mesh AP) radius configuration to authenticate to Microsoft Radius (NAS) server? Any guide, any manual? I configured Cloutrax to use my own ...
0
votes
0answers
725 views

How to do a COMPUTER (not user name) 802.1x (RADIUS) authentication with wpa_supplicant in Ubuntu 12.04?

In my corporation, NPS policy does not use AD username/password authentication, for it's too much less secure. For some laptops and PCs, Ubuntu 12.04 x86 desktop edition is deployed. I found that ...
0
votes
1answer
65 views

What decides what tunnels inside EAP-TTLS?

If EAP-TTLS is a EAP method that establishes a TLS tunnel, what goes in the tunnel? It could be another EAP method, but it could also be PAP. What decides? The server, the supplicant, or do they ...
0
votes
0answers
312 views

Windows 7 client unable to connect to Cisco Wireless Access point

My windows 7 pc is unable to connect to Cisco's Aironet 1040 AP(autonomous) AP is configured to use EAP with local RADIUS server. AP debug messages indicates RADIUS server rejected Windows client ...
0
votes
1answer
68 views

How to compute CRC in radius response

I have two different proprietary software, one is radius module for billing, second is phone station pbx. When client doing a call, pbx sends radius auth packet to the billing. And billing answering. ...
2
votes
1answer
160 views

Allowing multiple IP addresses for a single VPN user

Currently for one of the company I am using ASA 5505 as an VPN server with freeradius (mysql module) as an authentication backend. User authenticatin is based on the group password, user password ...
1
vote
0answers
325 views

FreeRadius external authenification script

I am trying to configure FreeRadius to work with my external authentification script. I have a custom module exec myscript { wait = yes shell_escape = yes program = ...
6
votes
1answer
108 views

Network Policy Server Granular Time Restrictions

I am configuring NPS as a RADIUS authentication source for my wireless clients. I am trying to differentiate between school hours and after hours as I need to connect certain users to a different ...
1
vote
0answers
609 views

openvpn refusing connections with freeradius

I installed openvpn and freeradius from yum and I installed the radiusplugin_v2.1a_beta1.tar.gz but I am having connection issues with the error: XML-RPC: ConnectionRefusedError: 10061: No connection ...
1
vote
1answer
516 views

Cisco ISE Wlan user authentication fails for users with umlaut

We have setup a Cisco Identity Services Engine to manage WLAN access for our users. Access should be granted to users from a specific Windows Active Directory group. This works fine for users having a ...
0
votes
1answer
214 views

Using NPS to restrict access to WLAN

We currently have one WLAN that only domain users can connect to. We will be adding a guest WLAN and would like all non-domain machines to use this, even if a user has a domain account. We have set ...
3
votes
1answer
459 views

Registation or Guest VLAN for 802.1x via Microsoft NPS

I am currently working on a Microsoft NPS solution to provide 802.1x MAC authentication for wired and wireless clients along with providing a VLAN for the clients to be moved to. It currently works ...
0
votes
0answers
52 views

Network Role based routing

Apologies my networking skills are a tad rusty. I'm looking for a way to setup a system that gives me the ability to setup Role-based access to specific network resources. For example, i have three ...
1
vote
1answer
389 views

Machine account authentication on Radius server

My workstation is under Linux. I have an Active Directory domain controller + Radius server on Windows 2008. I can verify user account 'radius-01' using 'radtest' tool: $ radtest -t pap radius-01 ...
0
votes
0answers
296 views

Squid authentication through freeRADIUS

I'm experiencing a strange behavior with Squid and freeRADIUS. I can clearly see in Radius's debug mode (radiusd -X) that radius is sending access-accept packets to Squid but Squid rejects my client. ...
2
votes
1answer
211 views

PEAP validation against a different, secondary domain?

Probably a little bit confusing, so let me explain the situation. Our company wants to implement a corporate wireless LAN with PEAP authentication. Unfortunately, someone made a big mistake in our ...
0
votes
1answer
460 views

Windows 7 Wifi Certificate Trust Anchor

When attempting to connect to our company wireless while not on the domain, I receive a message saying that our RADIUS server provided a valid certificate issued by our root CA, but that the root CA ...
6
votes
1answer
608 views

WPA2 Enterprise without a Client-End Certificate

This question is practically identical to this question, but the difference being that the authentication server is freeRADIUS on Ubuntu and the access-points are DD-WRT. Additionally, I would like ...
1
vote
1answer
2k views

Use RADIUS authentication with Remote Desktop Services

I have a PhoneFactor implementation that I love and cherish for VPN access. PhoneFactor provides us a RADIUS server that checks against an approved-users list and our Active Directory implementation, ...
1
vote
0answers
110 views

authentication of VM's using PPPoE

I have two VM's running on Ubuntu box.Their name and IP addresses are give below. nas 192.168.129.153 home_user 192.168.129.152 I establish a ppp connection ...
0
votes
2answers
287 views

What is the best methodology for managing backups of configuration files on unix/linux systems?

Hey Serverfault community, So what are the best practices for managing backups of various configuration files on a production unix/linux systems? for example, (and why I am asking). I am part of a ...
1
vote
1answer
1k views

Using SHA1 user password fields in freeradius radius server

I have proprietary web application which stores user password in form of sha1$79b2c$b3704ec5703ef28ded379cf6c6de4c4160aa029b. This is a salted sha1 hash. I want to use this presaved information for ...
0
votes
0answers
23 views

Connecting two VM's connected to a bridged network using pppd [duplicate]

Possible Duplicate: Communication between two systems using pppd I have two Virtual Machines (both Ubuntu 64-bit machine) connected to a bridged network.The name and ip-address are give ...