Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

learn more… | top users | synonyms

0
votes
1answer
15k views

How to configure FreeRadius to accept all authentication requests?

I'm attempting to configure FreeRadius to work with Dynamic VLAN Assignment. What I'm attempting to do, is return a specific VLAN ID for known hosts, but return a default VLAN ID for unknown hosts. ...
0
votes
1answer
296 views

freeradius authenticate over ldap log files

when config free-radius to authenticate over ldap where are the log files that store usernames and other connected client info? excuse me for my bad English.
0
votes
1answer
2k views

pam_auth_radius - RADIUS users vs unix users

I have recently set up a server with FreeRADIUS to authenticate and keep track of admin logins on some of my devices. I'm looking at getting my Linux and FreeBSD machines authenticating against ...
0
votes
1answer
712 views

OpenBSD logins via SSH seem to be ignoring my configured radius server

I've installed and configured a radius server upon my localhost - it is delegating auth to a remote LDAP server. Initially things look good: I can test via the console: # export user=skemp # export ...
4
votes
2answers
424 views

Login-time quota for VPN users

I have configured Routing and Remote Access Service in Windows Server 2003 as the VPN server. VPN users are defined in Active Directory which is running on this server too. How i can configure the ...
4
votes
1answer
2k views

Configuring RADIUS or LDAP on Supermicro (ATEN) IPMI

I'm trying to get our new server, a X8DTN+-F's IMPI configured to talk to our authentication servers. The two choices are LDAP and RADIUS. I'm debugging this by looking at packet captures, as it ...
1
vote
1answer
314 views

FreeRADIUS Default Answer

We are using FreeRADIUS with a MySQL database, authenticating users. We ran into an issue where are MySQL database was slow causing the max number of threads to be reached. The issue with this is, ...
0
votes
1answer
491 views

How would I relay/proxy/mirror RADIUS from one server to another?

Scenario... I have a Windows Server 2003 box acting as a RADIUS server that is connected to my AD in network A. I have network B which is not connected to network A. Can I install something on a ...
4
votes
2answers
7k views

Is it possible to use WPA Enterprise Mode without having to use or issue certificates?

Scenario... I have a wireless network that students use for Internet access. Each student has an Active Directory account. Is it possible to configure my APs to require them to use there AD ...
2
votes
4answers
127 views

How can I revoke access for a user across different systems?

We are going to let one of our sysadmins go in a few weeks. He has access to our entire infrastructure, so we'll have to reset the passwords on everything. This is going to be really time consuming ...
1
vote
2answers
1k views

How to set Windows to use an external RADIUS server for user authentication to share folder?

Is it possible and if so how, to make users use an external RADIUS server to connect to Windows shares?
2
votes
1answer
6k views

Users loggin to 3Com switches authenticated by radius not getting admin priv and no access available with radius service down

Following the setup that I have for my Cisco devices, I got some basic level of functionality authenticating users that loggin to 3Com switches authenticated against a RADIUS server. Problem is that I ...
2
votes
2answers
123 views

RADIUS Protocol - Sending more than 255 bytes in vendor-specific field

I am using the RADIUS protocol to for sending some values from client to server. I am using vendor specific value pairs, and defining our own types. But the value length for Vendor-specific data is ...
1
vote
1answer
102 views

Vista Enterprise doesn't find logon servers in a network with 802.1x authentication

In a network with 802.1x configuration and a samba server configured in the domain, I have a radius server that delegates the authentication against the samba domain for users (using LDAP). The radius ...
1
vote
2answers
7k views

configure a Cisco ASA to use MS-CHAP v2 for RADIUS authentication

Cisco ASA5505 8.2(2) Windows 2003 AD server We want to configure our ASA (10.1.1.1) to authenticate remote VPN users through RADIUS on the Windows AD controller (10.1.1.200) We have the following ...
1
vote
1answer
3k views

Windows XP login using Radius authentication

I would like to use existing Radius server to provide AAA for users which are logging to a Windows XP machine. Cisco can use Radius, Linux (via PAM) as well, is it possible for Windows XP?
2
votes
1answer
2k views

NPS will not add Radius client

I've just installed a fresh copy of NPS on a new 2008 R2 Std server. When I go to add a Radius client, I get "NPS Error: The service being accessed is licensed for a particular number of connections. ...
1
vote
2answers
876 views

8021x wireless clients auto connect prior to user login

I am using a 2008 r2 dc that also performs Radius (NPS), I also have a 2008 r2 certificate authority which is giving out certificates. The computers are getting the certificate and when a user logs ...
1
vote
2answers
4k views

RADIUS authentication on Cisco switches: how to assign privilege levels?

I need to configure some Cisco switches (IOS 12.x) to authenticate against a RADIUS server; the server is Windows Server 2003's IAS, and it validates users against his Active Directory domain. I know ...
0
votes
2answers
2k views

VPN Router + LDAP/RADIUS?

I need a VPN-capable router, preferably with a web interface, that should be able to authenticate against my LDAP server which is behind the router. I'm utterly unable to configure that setup for the ...
0
votes
2answers
2k views

PPPoE and FreeRadius

We have a number of wireless clients using ubiquity radios that support PPPoE. The number of connected clients is currently sitting around 20. But this is increasing rapidly and we want better ...
1
vote
2answers
5k views

Certificate Authority - RADIUS/WPA

We have a problem with our Certificate Authority, it deletes its own Computer Certificate day-by-day. I implement a WPA wireless security via RADIUS standard with using that computer. So everyday I ...
1
vote
1answer
3k views

Is there a way to allow all external ip connections in FreeRadius?

I have a problem setting up FreeRadius server to allow connections from all external IP addresses. My hotspot system is based on CoovaAP and custom made captive portal which communicates with ...
4
votes
5answers
5k views

Central Authentication For Windows, Linux, Network Devices

I'm trying to find a way to centralize user management & authentication for a large collection of Windows & Linux Servers, including network devices (Cisco, HP, Juniper). Options include ...
8
votes
4answers
871 views

Wireless AAA for a small, bandwidth-limited hotel

We (the tech I work with and myself) live in a remote northern town where Internet access is somewhat of a luxury, and bandwidth is quite limited. Here, overage charges ranging from few hundreds, to ...
0
votes
1answer
674 views

radius traffic accounting - what attributes do I use for traffic (and how)

we are building a web front end for a internet access token management system that uses radius (freeradius) queried from a captive portal. Reason for building this part is the integration into the ...
2
votes
1answer
951 views

Radius + SSH Key Authentication

Does anyone know if it is possible to configure pam to require both radius AND ssh-key to successfully authenticate ?
0
votes
3answers
679 views

Radius server benchmark

I wrote some module for FreeRadius and need to check it's performance. Using radclient is not OK because radius server is multi threaded and radclient not - it waits for an answer for previous request ...
1
vote
1answer
2k views

How to monitor freeradius using EAP-MSCHAP v2 authentication method with Nagios?

How to monitor freeradius using EAP-MSCHAP v2 authentication method with Nagios? Do you know any nagios plugins for such monitoring?
2
votes
1answer
2k views

IAS migrate from 2003 server to 2008 r2

I have recently upgraded all our DC's from 2003 svr to 2008 r2 servers. I had a radius server in the existing environment for 8021x authentication. I successfully exported the configuration to a text ...
0
votes
1answer
548 views

How to export MS IAS Radius Login Events to a remote system

Is there a way to (export|pull) MS IAS radius login events (to|from) a remote system ? I can see that the logs are stored in plain text in a file called system32/logfiles/nap On the Windows 2008 ...
1
vote
2answers
2k views

802.1X EAP authentication in Cisco switches with certificate

I am currently planning to implement 802.1X authentication for all the wired computers at the office where I work at currently. We have successfully implemented 802.1X authentication with ...
0
votes
1answer
495 views

Linux: Chilispot or FreeRadius

Has anybody installed Chilispot or FreeRadius on Ubuntu? If yes, where are the traps? How is your experience? Peace Ice
0
votes
2answers
2k views

Can I Specify an Existing ACL using a Radius AV Pair?

I am able to specify access-lists for VPN users on my IAS radius server using avpairs like: Cisco-AVpair = "ip:outacl[#number]={standard-access-control-list | extended-access-control-list}" So for ...
1
vote
3answers
4k views

Are Reversibly Encrypted Passwords safe, and Why isn't it working when enabled for a user?

In my event log, when my router tries to use Radius to authetnicate I get the following: """The user could not be authenticated using Challenge Handshake Authentication Protocol (CHAP). A ...
1
vote
1answer
4k views

Command Line tool for Linux to test Windows Radius

Anyone know a tool that works to test authentication against a Windows Radius Server? I have tried radtest with: radtest -d /usr/share/freeradius/ kbrandt 'betYouCantGuess' theServer 10 ...
1
vote
1answer
178 views

Locking down specific VPN users or any other alternatives?

I am looking for solutions on locking down VPN connections from clients to our untrusted testing domain. Basically a remote access option that we can give our clients to road test our software before ...
1
vote
1answer
310 views

Cisco 1841 banner info

I am using a Cisco 1841 router. I have programmed radius settings onto it which is always used to login if the radius server is present. If the radius server is down or not present it then converts to ...
1
vote
2answers
1k views

Radius server test tool [closed]

Is there any good tool to test Radius server? (linux|windows|unix) Authorisation check is a minimum requirement.
8
votes
2answers
8k views

Beginners questions on how RADIUS and WiFi authentication works

I am a network admin at a high school in South Africa, running on a Microsoft network. We have approximately 150 PCs around the campus, of which at least 130 are wired to the network. The remaining ...
0
votes
2answers
11k views

Authenticate Cisco ASA to Windows 2008 domain

My office has replaced its Windows 2003 domain and domain controllers with Windows 2008. I have a Cisco ASA 5510 which handles VPN connectivity for our remote users, still integrated with one of the ...
0
votes
1answer
1k views

Failed binding to /var/run/freeradius/freeradius.sock: Permission denied

I am trying to install FreeRadius, but I am getting the following error: Failed binding to /var/run/freeradius/freeradius.sock: Permission denied I have no experience with Unix sockets, so I ...
0
votes
2answers
1k views

Broken 802.1x Windows Server 2008 R2

I've setup a new Windows Server 2008 R2 installation with AD, Certificate Services, NPS, and RRAS. I have setup (using the wizard) the policies for 802.1x authentication using an Airport Extreme as ...
14
votes
5answers
28k views

Setting up RADIUS + LDAP for WPA2 on Ubuntu

I'm setting up a wireless network for ~150 users. In short, I'm looking for a guide to set RADIUS server to authenticate WPA2 against a LDAP. On Ubuntu. I got a working LDAP, but as it is not in ...
3
votes
2answers
6k views

WPA2 Enterprise - Validating Identity

I cannot get WPA2 enterprise to work on my network. I will give you an overview of the current setup. Windows Domain, using IAS and its own CA Linksys WAP200 Access Point I setup the AP to use ...
2
votes
4answers
734 views

Has anyone had luck running 802.1x over ethernet using the stock Windows or other free supplicant?

I just wanted to see if anyone else has had luck implementing 802.1x over ethernet. So here's my basic setup. Switch sends out 3 eapol messages spaced out 5 seconds apart. if there's no response the ...
1
vote
1answer
1k views

where can i find a RADIUS configuration example of A cisco 2106 in combination with A juniper steel belted radius?

I'm looking for a configuration example of a Cisco wireless lan controller in combination with a juniper steel belted radius appliance (used to be made by funk now acquired by Juniper). It states in ...
3
votes
2answers
2k views

Setting up RADIUS Server for use by a VPN device

Currently we have a Vigor 3300 router that acts as our VPN server. At the moment we set up connections for home workers manually in the device. What I would like to do is remove this extra step and ...