Questions tagged [radius]

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

Filter by
Sorted by
Tagged with
1 vote
1 answer
207 views

802.1X Chicken or the Egg?

I'm reading about 802.1X and WPA-2 Enterprise and how to set up it. I've read briefly about the different EAPs and understand that EAP-TLS is the better method of authentication due to the use of ...
Synthetic Ascension's user avatar
1 vote
0 answers
1k views

How can I authenticate with both Synology OpenVPN + Radius Plugin?

I would like to have a double authentication: Certificate based authentication in OpenVPN as well as User/Password authentication via the Radius-Plugin provided on the server (Synology NAS DS2016play ...
DaCapitalist's user avatar
0 votes
0 answers
415 views

freeradius and configure eap or pap with rest

free radius and configure eap or pap with rest i want use strongswan with free radius and rest module, i see sql and eap work together, how can configure eap with rest ? the important part is ...
user3652881's user avatar
0 votes
0 answers
620 views

how conncet ibsng as redius server to strongswan

I want to use ibsng (on centos 6) as a Radius server and manage my strongswan accounts (on centos 7). https://wiki.strongswan.org/projects/strongswan/wiki/EapRadius I made these settings and set up ...
user3652881's user avatar
0 votes
1 answer
1k views

VPN Connection: It connects but no access to remote network resources and shows as Private rather than Domain

I have a puzzling issue that I cannot find an answer for. I'm trying to connect a Win 10 (1909) machine to a VPN running on SBS 2011, via a RADIUS server. The client connects OK, apart from I don't ...
Andy Pelton's user avatar
0 votes
1 answer
14k views

Vlan manager does not automatically disable macs

I want to implement a client infrastructure where the devices connect to the network in different vlan. I installed a freeradius server connected to our Active Directory. I have enabled the switches ...
yoga84's user avatar
  • 1
0 votes
1 answer
2k views

How to configure FreeRADIUS with EAP-TLS and group-based authorization?

I configured FreeRADIUS to use EAP-TLS for certificate based authentication (self-signed certificates). Authentication works fine, except that I'd like to add group-based authorization. More ...
j3141592653589793238's user avatar
0 votes
1 answer
1k views

How to configure FreeRADIUS for use with strongSwan group selection?

Building a VPN service with strongSwan, I need to distinguish between several groups of users where each group is assigned a certain subnet with certain permissions (i.e. "group x" has access only to ...
j3141592653589793238's user avatar
0 votes
0 answers
542 views

Can NPS, RADIUS, and 802.1x Assign Multiple VLANs To A Single User?

I will be using Network Policy Server (NPS) with a RADIUS server to assign each user to a VLAN when they successfully authenticate to the network using 802.1x. In Active Directory Directory Services (...
Bill Vallance's user avatar
0 votes
1 answer
272 views

Requesting access to a Radius server after having requested a previous (succeful) access to another Radius server

I don't know if this idea is non-sense but I was wondering if it was possible. I have a FreeRadius server backed by a LDAP server with uses EAP-TTLS (that is, username+password) to authenticate. So ...
Osqui's user avatar
  • 135
0 votes
1 answer
3k views

Freeradius 3.0.12 doesn't send any data through mysql

After upgrading from v 2.x, freeradius stopped working for me. I have done multiple tshooting steps which led me to believe that the application is not sending any data through MySQL, even though it ...
naven's user avatar
  • 1
0 votes
1 answer
23 views

Different SSLSocket with Radius Server

I want to make a server and client application. All clients connect to the server via wifi. I want to protect the network with SSL Certificate. I found 2 alternatives: By using SSLSocket (javax.net....
koding's user avatar
  • 3
0 votes
1 answer
457 views

FreeRADIUS - Use different pipeline for different clients

I currently have a FreeRADIUS setup using EAP-TTLS. I'd like to set it up such that requests coming from localhost use PAP, but that other requests still use EAP-TTLS. How do I select authentication ...
Tim Morris's user avatar
2 votes
0 answers
981 views

pfSense: config with daloRadius (freeRadius) to setup download quota limitation

I have pfsense and daloRadius(running freeRadius inside) up and running, I successfully configured radius parameters on pfSense and the NAS on daloRadius and they can talk to each other. I am able to ...
Xsmael's user avatar
  • 185
2 votes
2 answers
2k views

How do I get a Linux box to use RADIUS authentication with a certificate?

Googling anything involving RADIUS configuration has been hell, as many of the terms get mixed together, making search results useless, so... I have a RADIUS server offering EAP-TTLS based ...
Tim Morris's user avatar
1 vote
1 answer
1k views

Behaviour of authentication when using multiple Radius servers on RRAS

I've tried looking this up for hours but my google-fu is failing me it seems. The question is rather simple, if I configure multiple Radius servers in RRAS, if they're all ballanced equally, how are ...
Mikael Dyreborg Hansen's user avatar
0 votes
2 answers
2k views

Why is radtest not working, and returning an error about radclient?

I've installed Free Radius following these steps: sudo apt install freeradius freeradius-config sudo sed -i '1s/^/steve Cleartext-Password := "testing"\n/' /etc/freeradius/3.0/users sudo systemctl ...
dǝɥɔS ʇoıןןƎ's user avatar
0 votes
1 answer
352 views

802.1x and NPS to secure wired intranet

I want to secure our network from unmanaged device (for example a user brings a laptop from home and connects it to a port in a meeting room). As far as I understood I can use 802.1x and a RADIUS ...
Vincenzo's user avatar
4 votes
1 answer
12k views

Network Policy Server + RADIUS not listening on any ports for Windows Server 2019

I must be missing something basic - is there some "master" switch for enabling Network Policy Server? It's not listening on any of the RADIUS ports. Detail: Trying to setup Windows Server 2019 as a ...
BlueSky's user avatar
  • 141
2 votes
1 answer
4k views

Adding compiled FreeRADIUS to systemd

Working on getting FreeRADIUS up and running and having issues adding to systemd. Running standalone via radiusd -X works expected and all of the custom configurations are intact. Using freetds ...
Arnydo's user avatar
  • 23
0 votes
1 answer
299 views

Strongswan cannot authenticate with FreeRADIUS server: DNS error

I'm trying to set up RADIUS auth with my Strongswan server. I get the following error: Jun 2 20:51:47 nl1 charon: 17[LIB] resolving 'radius.server.com' failed: Name or service not known Jun 2 20:...
Keanu's user avatar
  • 1
2 votes
1 answer
2k views

EAP-TLS: How to verify a p12 key with freeradius?

I installed a Radius server with a EAP-TLS only configuration. I have a client.p12 file that is supposed to contain both the root-CA and the client certificate. I added the p12 key https://...
None's user avatar
  • 182
0 votes
1 answer
217 views

RADIUS configurations on Server 2008 R2 - WiFi issue

I have configured WiFi authentication on FortiGate 100D through RADIUS on Windows server 2008 R2. When I'm trying to connect to the wifi from a PC (Win 10), it works only when I check "Use my Windows ...
Oleg's user avatar
  • 1
1 vote
1 answer
86 views

WPA2 Enterprise: no risks for preconfigured clients when it comes to Rogue APs?

We are using, as default, PEAP and MS-CHAPv2 as inner authentication. I was concerned with security risks when it comes to rogue APs but a colleague told me that there are no risks for preconfigured ...
Jade Kush's user avatar
0 votes
1 answer
1k views

Can I make cisco router to act like a radius server?

I need to configure local radius authentication on my cisco router. I have web application in which we have implemented dual factor authentication it works fine with other radius server like ...
ananetworking's user avatar
1 vote
1 answer
622 views

Suddenly RADIUS authentication is gone on macOS server (TLS session fails)

Suddenly my RADIUS authentication is gone on my MacOS Server running 10.13.6 and Server Version 5.6.1 (17S2109. I already restored the Open Directory Server. $ host name.domain.tld name.domain.tld ...
SEJU's user avatar
  • 111
1 vote
1 answer
3k views

Is it ok to use PAP with TTLS on radius server?

We have deployed Radius server ( Freeradius 3.x ) and connected it to our LDAP database (ForgeRock OpenDJ). We have successfully configured EAP-TTLS with valid certificates and set it as default ...
pagep's user avatar
  • 137
1 vote
1 answer
2k views

Use CHAP with NPS and a Domain Controller in Core

I've noticed a difference on the authentication behavior of Active Directory where the Core version failed to authenticate properly when using CHAP from the NPS server. I have reproduct the problem ...
Veovis's user avatar
  • 163
2 votes
0 answers
1k views

FreeRADIUS with Let's Enrypt Certificate (trusted connection without provisioning?)

I have a FreeRADIUS server set up for PEAP/MSCHAPv2 connections with an SQL user backend. On that server, I have set up a Let's encrypt certificate for domain access.example.org. This certificate is ...
PiMaker's user avatar
  • 151
1 vote
2 answers
3k views

FreeRADIUS with LDAP vs Kerberos

The following site discusses how to setup FreeRADIUS to authenticate against an LDAP backend (it goes through a tutorial showing how to expose NT hashed passwords in FreeIPA so that FreeRADIUS can ...
user3814483's user avatar
1 vote
1 answer
1k views

StrongSwan on Amazon Linux with RADIUS

I'm trying to run strongSwan on an Amazon Linux instance with authentication against RADIUS but I receive an error when trying to start strongSwan charon[9518]: 00[CFG] RADIUS initialization failed, ...
Christian's user avatar
  • 796
5 votes
2 answers
4k views

2FA via freeRADIUS, ignoring password

I've been tasked with setting up freeRADIUS to prompt a user for their second authentication factor (eg. Google Authenticator OTP) BUT without first checking the user's password. I'm coming into this ...
Jeedee's user avatar
  • 121
0 votes
0 answers
478 views

nginx captive portal radius authentication

I have multiple Ruckus Access Point and I want to provide a custom captive portal for guest authentication. The thing I want is to check if user currently has access - then switch him to the site he ...
Krzysztof Majewski's user avatar
0 votes
1 answer
486 views

Log usernames in squid for clients connected in WiFi with Radius

I am looking for a solution to a problem: Clients connect to the WiFi network using a Radius server and then use the Internet through a transparent Squid server that logs access. I would like to ...
Chris's user avatar
  • 1
2 votes
1 answer
7k views

smb fails to start on centos7 radius server

I have a working radius server that auths connections to a PDC AD server. I wanted to create another one so that I can fail over on the firewall when needed. I created a second server using the same ...
IRBiddlecombe's user avatar
-2 votes
1 answer
196 views

radius or wpa2 error? - comptia network+ [closed]

Im taking the COMPTIA Network+ exam on thursday and have this practice question I dont understand the difference: Users connecting to an SSID appear to be unable to authenticate to the captive portal....
billnyeguy's user avatar
2 votes
0 answers
1k views

Freeradius multi-factor auth with LDAP and Yubikey

I just set up a freeradius server and would like to be able to authenticate using both the password of a ldap user and the yubico otp generated from their yubikey. It is working using the ldap ...
eli0T's user avatar
  • 110
0 votes
1 answer
86 views

Some Macs not authorizing via 802.1x

Hello I have a really weird issue with some macs not being able to connect to 801.1x in some areas on campus. They however can connect in other places on campus. The configs for both switches are the ...
goldenwest's user avatar
1 vote
1 answer
2k views

Allow user to ssh to server without having local account

I have a pam_radius module set up on a rhel7 server. A user with a local account is able to ssh into the server with the radius login information. I was wondering if it is possible to allow a user ...
goris29's user avatar
  • 11
0 votes
1 answer
1k views

RADIUS Will Not Authenticate For Console & SSH

I am trying to RADIUS authenticate on my HP ProCurve 2910al W14.38 with both console and SSH. My show authentication shows the following: Access Task | Login Primary Login Secondary Enable ...
JukEboX's user avatar
  • 835
0 votes
1 answer
138 views

Advice on deploying services like NTP, DNS, Radius etc for a small NOC

network engineer here. I recently deployed a small office network and was asked to help out with deployment of some of the services. I have two ESXi servers on my hands and I need to deploy NTP, ...
Rick Deckard's user avatar
3 votes
2 answers
9k views

MSCHAPv2 authentication not working

I've been fighting with this for around a week now. I'm trying to get a RADIUS server to authenticate against our Samba-based Active Directory, but I can't get it to work. Because of our ...
Dessa Simpson's user avatar
1 vote
1 answer
2k views

"Transport encryption required" when using transport encryption

I'm trying to set up a radius server to authenticate against LDAP, but I'm running into a weird issue: rlm_ldap (ldap): Bind with radiusd@[domain] to ldaps://localhost:636 failed: Strong(er) ...
Dessa Simpson's user avatar
0 votes
1 answer
1k views

How Windows check radius server certificate?

How Windows check radius server certificate (for wifi connections)? Does it look only on CN field from radius server certificate and not look at Subject Alternative Name field altogether? I did some ...
Raf's user avatar
  • 173
0 votes
1 answer
759 views

What is expected value of SMD5-Password in freeradius' user config file?

I am using freeradius v2.1.12 on Ubuntu v14.04. Here is /etc/freeradius/users: test SMD5-Password := "{SMD5}xbYqJDY4gqVyE8Vhty//QnRlc3RpbmcxMjM=" I get this value by using the perl script from ...
my_question's user avatar
5 votes
2 answers
15k views

Why freeradius server says invalid Message-Authenticator which is generated from radtest?

I am learning how to use freeradius, the version is v2.1.12. When I run radtest, there is no response from server, I see server side debug message has the following: Received packet from 127.0.0.1 ...
my_question's user avatar
1 vote
1 answer
3k views

Is it possible to host a RADIUS server on Windows 7 [closed]

Is it possible to host a RADIUS server on Windows 7. I am trying to use this as an authenticating server for my Routers. A third-party application is fine, however maybe if its possible it can use ...
Bryan's user avatar
  • 13
6 votes
1 answer
12k views

Use Azure Active Directory as RADIUS server for VPN gateway?

I'm using Azure Active Directory (Premium, with full MFA). I've set up a VPN gateway and would like users to be able to authenticate to it using their Azure AD username and password (instead of ...
Herb Caudill's user avatar
2 votes
0 answers
557 views

Azure VPN using RADIUS to solve local admin requirements

Now that Azure point to site VPN can be authenticated via RADIUS, would using RADIUS instead of certificates change the need for local admin privilege? I have clients that connect to Azure via point ...
Eric L's user avatar
  • 65
0 votes
1 answer
771 views

Asus AC5300 WPA2 enterprise hourly disconnection

I have an Asus RT-AC5300 running the latest stock firmware setup with WPA2 Entreprise. I can connect to the Wi-Fi with the radius server without any issue but I get disconnected every single hour. I ...
Ajite's user avatar
  • 1

1
2
3 4 5
8