Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

learn more… | top users | synonyms

0
votes
0answers
53 views

Network Role based routing

Apologies my networking skills are a tad rusty. I'm looking for a way to setup a system that gives me the ability to setup Role-based access to specific network resources. For example, i have three ...
1
vote
1answer
488 views

Machine account authentication on Radius server

My workstation is under Linux. I have an Active Directory domain controller + Radius server on Windows 2008. I can verify user account 'radius-01' using 'radtest' tool: $ radtest -t pap radius-01 ...
0
votes
0answers
342 views

Squid authentication through freeRADIUS

I'm experiencing a strange behavior with Squid and freeRADIUS. I can clearly see in Radius's debug mode (radiusd -X) that radius is sending access-accept packets to Squid but Squid rejects my client. ...
2
votes
1answer
251 views

PEAP validation against a different, secondary domain?

Probably a little bit confusing, so let me explain the situation. Our company wants to implement a corporate wireless LAN with PEAP authentication. Unfortunately, someone made a big mistake in our ...
0
votes
1answer
629 views

Windows 7 Wifi Certificate Trust Anchor

When attempting to connect to our company wireless while not on the domain, I receive a message saying that our RADIUS server provided a valid certificate issued by our root CA, but that the root CA ...
6
votes
1answer
799 views

WPA2 Enterprise without a Client-End Certificate

This question is practically identical to this question, but the difference being that the authentication server is freeRADIUS on Ubuntu and the access-points are DD-WRT. Additionally, I would like ...
1
vote
1answer
2k views

Use RADIUS authentication with Remote Desktop Services

I have a PhoneFactor implementation that I love and cherish for VPN access. PhoneFactor provides us a RADIUS server that checks against an approved-users list and our Active Directory implementation, ...
1
vote
0answers
122 views

authentication of VM's using PPPoE

I have two VM's running on Ubuntu box.Their name and IP addresses are give below. nas 192.168.129.153 home_user 192.168.129.152 I establish a ppp connection ...
0
votes
2answers
378 views

What is the best methodology for managing backups of configuration files on unix/linux systems?

Hey Serverfault community, So what are the best practices for managing backups of various configuration files on a production unix/linux systems? for example, (and why I am asking). I am part of a ...
1
vote
1answer
2k views

Using SHA1 user password fields in freeradius radius server

I have proprietary web application which stores user password in form of sha1$79b2c$b3704ec5703ef28ded379cf6c6de4c4160aa029b. This is a salted sha1 hash. I want to use this presaved information for ...
0
votes
0answers
24 views

Connecting two VM's connected to a bridged network using pppd [duplicate]

Possible Duplicate: Communication between two systems using pppd I have two Virtual Machines (both Ubuntu 64-bit machine) connected to a bridged network.The name and ip-address are give ...
3
votes
1answer
765 views

How do I go about Improving wireless security at the office (Radius? Certs?)

EDIT 1: Our environment is mixed, majority OSX with a few Windows and Linux boxes. More importantly, Android and Apple cellphones will also need wireless access on a regular basis. We have a redhat ...
-6
votes
1answer
112 views

networking and authentication

I installed a RADIUS server in my network (Windows 2008) and Active Directory which contains different users; I also have an access point (tp_Link) authenticated on RADIUS server. I am using Windows ...
4
votes
2answers
8k views

Troubleshooting Windows EAP/RADIUS connectivity issues

So, I guess the short version of the question is: I'm unable to get clients to connect to an enterprise-WPA wireless network after setting up a "new" NPS server and a new CA. After I manually ...
3
votes
1answer
454 views

What are the Precautions to be taken while configuring RADIUS authentication for Routers,Switches & Firewalls [closed]

Have quite a few questions for Implementing Radius for my network devices : How to safely implement aaa Radius authentication to make sure users have login using LOCAL database incase the Radius ...
4
votes
2answers
7k views

802.1x automatically validate certificate in windows clients

We're deploying a wireless networking using Windows Server 2008 NAC as a RADIUS server. When Windows XP or 7 clients connect they initally fail to connect. In order to enable the client to connect we ...
0
votes
0answers
173 views

DokuWiki Segmentation Fault On Radius Auth

I'm running x64 Ubuntu 12.04. I did a simple apt-get install dokuwiki to install DokuWiki. And I'm trying to follow the directions located here: http://www.dokuwiki.org/auth:radius to get Radius ...
0
votes
1answer
2k views

Radius Authorization against ActiveDirectory and the users file

I have a problem with my freeradius server configuration. I want to be able to authenticate users against Windows ActiveDirectory (2008 R2) and the users file, because some of my co-workers are not ...
1
vote
2answers
4k views

Freeradius authentication failed for unknown reason

I followed this instruction to force freeradius to use mysql database. and run freeradius in debug mod. but it rejects all authentication. mysql database : mysql> select * from radcheck; ...
2
votes
2answers
1k views

Restrict FreeRADIUS clients to access service from different LANs with same user and password

I have FreeRADIUS installed on my server, and also have two LANs (or may be more) managed by this server. Let's say LAN A:192.168.1.0, and LAN B: 192.168.2.0. I'm using FreeRADIUS in combination with ...
1
vote
0answers
328 views

LOCAL and RADIUS authentication on ASA

Have configured local authentication which was working fine.And today I wanted to implement RADIUS too .. but after I have done, Im unable to login to my firewall user-identity default-domain LOCAL ...
3
votes
1answer
2k views

Auth-Type :- Reject in RADIUS users file matches inner tunnel request but sends Access-Accept

I have WPA2 802.11x EAP authentication setup using FreeRADIUS 2.1.8 on Ubuntu 10.04.4 talking to OpenLDAP, and can successfully authenticate using PEAP/MSCHAPv2, TTLS/MSCHAPv2 and TTLS/PAP (both via ...
2
votes
1answer
140 views

How to use different network policies for administrative logins and wireless users?

I'm using a RADIUS server (NPS on Windows 2008 R2) to centrally manage authentication for a bunch of Cisco devices, including switches and wireless access points; I'm currently using RADIUS to ...
0
votes
0answers
332 views

How to send connection type (SSH|Telnet) info in Radius Access Requests on Cisco router?

I've configured the following on a cisco router: aaa authentication login default group radius local ! radius-server host x.x.x.x auth-port 1012 acct-port 1013 radius-server host y.y.y.y auth-port ...
0
votes
4answers
8k views

NPS EAP authentication failing after Windows Update

I have a Windows 2008 Std server running NPS. After applying the latest round of updates (including Root Certificates for April 2012 KB931125 (See:http://support.microsoft.com/kb/933430/)), EAP ...
4
votes
1answer
434 views

Cisco ASA LDAP Group Privilege Level

We have a pair of ASA 5510s (8.4.3) on which we use LDAP authentication for VPN and SSH access. On all of our Catalyst switches, which use RADIUS, we're able to set the shell:priv-lvl to 15 in the ...
0
votes
0answers
216 views

radius server for 802.1x wireless (Certificate timeout)

We have a radius server for 802.1x wireless setup. A little while ago all of our wireless routers stopped authenticating, we have solved this by re setting them up and setting a new password. Does ...
1
vote
2answers
221 views

Which Authentication Server in consumer Access Points

The WPA2 standard defines three entities: STA: the networking station, e.g. pc AP: access point AS: authentication server As far as I understand, when you buy a regular access point, there is a ...
2
votes
0answers
250 views

Macs to work on 802.1X wired network

We are in the process on 802.1X for all our wired clients. We are using NPS on Server 2008R2 as our Radius server. All our windows clients authenticate using just a computer certificate issued by our ...
2
votes
1answer
630 views

Configure VPN on ASA to log accounting via NPS

Currently we have VPN setup on an ASA 5510. I have it set to use NPS for RADIUS authentication, but I've never really configured much as far as accounting. I'm wanting to set this up to be able to ...
3
votes
4answers
2k views

802.1x PEAP GPO that trusts self-signed CA certificate

I am working on a Freeradius backed 802.1.x authentication infrastructure for our wireless clients. I am using a rather generic Freeradius configuration with EAP-PEAP. Our clients are predominantly ...
2
votes
3answers
1k views

Server 2008 VPN authentication WITHOUT Active Directory

First the set up. 15 workgroup users, and we have a Watchguard firewall with VPN. Currently using the Watchguard to authenticate users for VPN access, but the boss wants to use server 2008 as the ...
0
votes
1answer
491 views

Radius + Vyatta Firewall + Citrix Access Gateway

Im having a problem setting up Radius with Citrix Access Gateway. I had it all set up and working fine when I had the Citrix Access Gateway (CAG) on our main LAN but I want to move it into DMZ. I ...
0
votes
1answer
437 views

freeradius address assignment from ippool

I'm trying to figure out how to assign IP addresses from an ippool to mobile units. Ideally, I would like a unit to receive the same IP at each request. There is no data source to use to populate ...
0
votes
1answer
396 views

WPA2-Enterprise and RADIUS accounting server

Is mandatory to use WPA2-Enterprise to be able to send accounting packages to my RADIUS server from an access point (Meraki)?
2
votes
2answers
459 views

Meraki's Accounting-Requests to RADIUS server

I'm running a RADIUS server with some Meraki APs, the process of Authentications is fine... But it seems that the Meraki Cloud Controller is just sending the authentication packets and not the ...
2
votes
1answer
2k views

Sign an OpenSSL .CSR with Microsoft Certificate Authority

I'm in the process of building a Debian FreeRadius server that does 802.1x authentication for domain members. I would like to sign my radius server's SSL certificate (used for EAP-TLS) and leverage ...
5
votes
6answers
3k views

Why would you use EAP-TTLS instead of PEAP?

As I understood EAP-TTLS and PEAP share same level of security when implemented in wireless networks. Both only provide server side authentication via certificate. The drawback of EAP-TTLS can be ...
1
vote
2answers
563 views

Radius over WAN

I have a couple of small-business routers (Cisco RV120W) that I use at some of our smaller offices configured with a site-to-site VPN to allow connectivity for devices & such between my main ...
1
vote
2answers
1k views

Windows XP will not connect to Enterprise Wireless

We run a Radius server (Windows Server 2008 R2 running NPS). My goal is to push out GPOs to wireless users with the network information. I am successfully doing this with Windows 7 clients, iOS ...
-1
votes
2answers
157 views

RADIUS hardware on the client side?

From the wikipedia page on RADIUS: http://en.wikipedia.org/wiki/RADIUS It says: RADIUS is a client/server protocol that runs in the application layer, using UDP as transport. The Remote Access ...
3
votes
1answer
660 views

Is a PKI required when authenticating a Cisco Aironet AP via radius against AD

We're a small office and have a Cisco Aironet 1250 access point set to WPA-PSK. Now that we've deployed Active Directory I'd like start authenticating my users via radius instead of a PSK. To this ...
0
votes
0answers
904 views

Freeradius - How to disable 'detail' accounting logs

A customers AAA server is generating massive accouting detail log files which are causing disk space issues. Since they are logging accounting data to sql, we would like to disable these detail files. ...
2
votes
0answers
459 views

Windows 7 / Windows Vista won't connect to 802.1x RADIUS Server

I've deployed Radius and have no problems connecting with TTLS, PEAP, or MD5 using linux, mac, and windows xp. For Windows 7 and Vista, I'm never prompted with the dialog box to enter username & ...
0
votes
1answer
517 views

Does radius server returns Access-reject on key mismatch?

Does the radius server returns Access-reject on key mismatch between client and server , or does it drop the packet . I was not able to get as , does this part comes in packet verification process?
2
votes
0answers
1k views

Testing radius server from Mac OS X client

I have a radius server set up on a server running Ubuntu 11.04. I have configured my switch to use the authentication server's IP (192.168.1.2) for RADIUS / 802.1x authentication, and I created a ...
0
votes
1answer
1k views

How to limit a VPN user to just one host?

I have a Cisco ASA that authenticates off of RADIUS / AD. I need to give a user VPN access but I want to limit their access to only one host. What is the best way to do this?
0
votes
1answer
259 views

RADIUS work flow

I am attempting to create an authentication system for my network via Radius. Eventually, I want all machines on the network to authenticate with Radius before gaining access to any other network ...
3
votes
1answer
76 views

Is there such a thing as “server sliding” (or similar), and if so, what is it?

I am not a network engineer, but rather a translator, so I apologize in advance if this is a rather obvious question to some of you. Normally Google can answer my questions, but in this case I'm ...
0
votes
2answers
467 views

Make user home directory at gdm login

I'm trying to make home directory at (RADIUS) user gdm login. The auth is working right, but when I try gdm says that the user hasn't a home directory. I tried to do that with pam_mkhomedir.so but ...