Questions tagged [freeradius]
FreeRADIUS is an open source RADIUS server
276
questions
1
vote
0
answers
42
views
Ubuntu 22.04 LTS: EAP-TLS not working
I'm setting up RADIUS server using FreeRADIUS and self-signed certificate. Tested using eapol_test and successfully logged in. But when I'm trying to add a PC running Ubuntu 22.04 LTS to the network, ...
- 153
0
votes
0
answers
21
views
Manage nuumber of connections for OCserv and FreeRADIUS
I have numbers of Ocserv servers and connected to a FreeRADIUS server for authentication. I have configured directive bellow in Ocserv of each server to don't let a user connect more than 2 times.
...
- 3
0
votes
0
answers
95
views
how to set up eat /etc/pam.d/radiusd file to authenticate a user with his username, password and Google Authenticator token. Using Freeradius for 2FA
i have a problem about configuring the “/etc/pam.d/radiusd” file.
I am working on a Linux Debian System.
rn this is my configuration:
auth requisite pam_google_authenticator.so forward_pass
auth ...
0
votes
1
answer
25
views
Freeradius failed to start with dhcp port 67
I'm trying to use freeradius with dhcp on debian 12. I'm relaying DHCP packets from the router.
FR setup with DHCP listen port 67 : freeradius -X works just fine, as expected. But systemd cannot ...
- 31
0
votes
1
answer
63
views
FreeRADIUS / Active Directory / Computer Authentication / VLAN based off of UserDN
I am currently determining VLAN/dACL assignment based off of group membership of the computer authenticating and would like to instead switch to determining VLAN/dACL assignment based off of the OU ...
0
votes
0
answers
17
views
FreeRADIUS Certificate Based Authentication WiFi
We are currently trying to deploy a new SSID for BYOD devices. The plan is to host a FreeRADIUS (CA) server and generate a certificate which can be shared to all staff and can be imported onto their ...
- 101
0
votes
0
answers
110
views
OPNsense with Radius Accounting
I've been testing OPNsense radius accounting by following this document,
https://docs.opnsense.org/manual/how-tos/accounting.html
I am able to authenticate user through the captive portal but there is ...
- 1
0
votes
0
answers
39
views
Authenticate windows 7 PCs with Radius server
I have a network of Windows 7 PCs. And I am looking for a way to authenticate these computers through a centralized credential server. AD was one of the options but I don't have license for Windows ...
0
votes
2
answers
106
views
802.1x with GoDaddy Certificates EAP-TTLS
I have a little question. I am not sure but does clients need to resolve AAA Server via DNS and need to reach AAA Server if I use EAP-TTLS with GoDaddy x509 Certificates to verify the certificate on e....
0
votes
0
answers
39
views
Dynamic Client IP in freeRADIUS where client is identified by secret
I have multiple locations sending RADIUS requests to my server. These are currently configured as:
client any_client {
ipaddr = x.x.x.x
netmask = 32
secret = client_secret
shortname = ...
- 23
0
votes
2
answers
201
views
OpenVPN + PAM + Freeradius
Situation:
I have fully configured and working Freeradius server.
Installed OVPN 2.6.4 on other server. And goal is auth through Radius.
Installed pam-radius-auth. Configured (confs below).
...
0
votes
0
answers
476
views
SSL Error with EAP-TLS FreeRadius
My RADIUS Server is configured for EAP-TLS. I have a valid Server Certificate, Private Key and Fullchain file. When testing the authentication with a Client Certificate using eapol_test i get the ...
0
votes
0
answers
127
views
WPA3 with Freeradius and SAMBA AD DC
I have a working Freeradius authenticating WiFi users (windows,mac,linux,ios,android) with WPA2 enterprise using samba AD DC for user directory.
I want to move to WPA3 Enterprise but I am not sure if ...
- 371
0
votes
0
answers
21
views
How to fetch attribute in freeradius plicy.d/filter
I have an issue with getting empty Called-Station-Id in policy.d/filter of Freeradius. there are different VLANs the user can connect from I want to assign VLAN by filtering the WIFI name in the ...
0
votes
0
answers
92
views
Why I am getting wrong IP address when connected to the freeradius server with VLAN attribute set
I am new to the Freeradius
I am trying to connect to the Unifi AP through freeradius authentication. I can connect to it successfully and access local services. but I am not getting the correct IP ...
1
vote
2
answers
925
views
FreeRadius server not responding to Access-Request
I currently deployed freeradius and radtest looks good for local host but when I sent Access-Request from external server, FreeRadius server doesn't reply. see below output of radsniff
[root@pgw-...
- 11
1
vote
2
answers
241
views
FreeRADIUS keeps complaining about TLS 1.0/1.1, despite tls_min_version setting has been set to 1.2
I'm implementing EAP-TTLS with FreeRADIUS 3.0.21. Devices are able to connect, server is running. However, FreeRADIUS complains about TLS 1.0/1.1 are still available in its starting log messages. Here'...
- 111
0
votes
0
answers
160
views
Freeradius: use the users file to assign a group to a user and then use the group to allow the user to access only 1 SSID
I'm trying to use Freeradius 3.0.20 on Ubuntu. I use the users file to authenticate wireless users and that's working just fine. (This is a home system, not at work).
For the moment I have a couple of ...
0
votes
0
answers
599
views
Simultaneous Use in freeRadius 3.0
I install Ubuntu server 22.04
I install apache2
I install PHP
I install PostgreSQL and phpPgAdmin
I install freeradius 3.0
ln -s /etc/freeradius/3.0/mods-available/sql /etc/freeradius/3.0/mods-enabled/...
- 1
0
votes
0
answers
129
views
How to configure FreeRadius on a different server than Samba4?
I want to set up a FreeRadius server that uses a Samba4 DC base.
I wanted FreeRadius to be on a different server that wasn't a DC Samba4. Is it possible?
Consulted links:
https://wiki.samba.org/index....
- 17
1
vote
1
answer
125
views
Freeradius case sentivitity of letters
I have VirtualMachine with freeradius server (3.0). I am using the authorization file which contains my PPPoE users. The problem seems to be the username: the login is in UPPER CASE which collides ...
- 13
0
votes
0
answers
2k
views
Sorry i'm stuck with freeradius to LDAP
Ok Im a little stuck with FreeRadus.
I think I have found the problem, I just don't understand why so If I try to auth over the wifi it looks like its not getting the password below is the debug of ...
1
vote
2
answers
312
views
FreeRADIUS / Active Directory / Computer Authentication
I'm looking for an easy way to turn:
User-Name = "host/DESKTOP-F6E023D.msad.domain.net"
to the following:
Stripped-User-Name := DESKTOP-F6E023D$
realm := msad.domain.net
In my virtual ...
1
vote
0
answers
2k
views
Cannot connect with Android native IKEv2 VPN client with Radius backend?
I can see that Android native VPN client supports IKEv2/MSCHAPv2, so in theory it should be possible to connect to Strongswan VPN server from Android without installing additional software (like the ...
1
vote
1
answer
298
views
FreeRADIUS & PrivacyIDEA Authentication
I am using PrivacyIDEA's implementation of FreeRADIUS to send authentication requests to PrivacyIDEA. However, I'd like to locally authenticate a specific user if the request comes in. I've modified ...
1
vote
1
answer
431
views
Freeradius with dhcp server: Calls to perl module returns error
This is a continuation of my previous question in sending static routes from Freeradius DHCP server implementation in combination with Strongswan VPN server.
When debugging Freeradius using tcpdump ...
0
votes
0
answers
313
views
(FREERADIUS&MYSQL) Getting aborted connections to my db (got an error reading communication packets)
https://i.stack.imgur.com/qUI2n.png
Running Debian 11, 1 week trying to figure out where this issue comes from, tried authentication method (made a fresh install of mariadb, setting unix socket so ...
- 1
0
votes
1
answer
3k
views
Daloradius ERROR: (3) sql: ERROR: rlm_sql_mysql: ERROR 1054 (Unknown column 'acctupdatetime' in 'field list')
Getting the following error after configuring freeradius with daloradius.
ERROR: (3) sql: ERROR: rlm_sql_mysql: ERROR 1054 (Unknown column 'acctupdatetime' in 'field list')
Radius server accounting ...
- 121
0
votes
1
answer
615
views
Is there a freeradius configuration to ignore requests from users or specific sources?
I've got a little server running freeradius for a handful of systems that I don't have any control over the firewalling or configuration for. (i.e. I can't control what it sends to me, but I need to ...
- 2,188
0
votes
1
answer
1k
views
FreeRADIUS accept any password for one user only
I need to configure one user on FreeRADIUS to authenticate and generate an access-accept regardless of the password submitted by the user. I can see how to do this for all users, but how can I do this ...
- 277
1
vote
1
answer
1k
views
FreeRadius with mixed CAs
Is it possible to run FreeRadius (version 3.0.13) with two different CAs? So that I have a server certificate from one CA and the client certificates come from a different CA?
Our current setup in /...
- 145
0
votes
1
answer
531
views
freeradius and openldap : vlan attribution working with radtest but not with wpa_supplicant
Both of my services freeradius and openldap are on the same server. The schema Freeradius is loaded into openldap.
I configured the radiusProfileDN of a user to link to a group. In this group, I have ...
- 21
1
vote
1
answer
2k
views
Freeradius: Authenticate users on certain condition
There is a network where users are using PPPoE to establish connections to the Access servers. We have lost the billing system and users' DB. The only condition that we know is that 'Valid credential ...
- 121
-1
votes
2
answers
1k
views
Configuring FreeRADIUS to log user commands
I need to be able to configure a radius server to log users' activities like the commands they're running whilst they were logged into a client device. Entries should be made in the /var/log/...
- 37
3
votes
2
answers
11k
views
How to encrypt user password in Freeradius
I recently set up a freeradius server and would like to change the user password that is presently in cleartext to encrypted in the /etc/freeradius/3.0/users file.
This is what it looks like on the ...
- 37
0
votes
2
answers
1k
views
Can radius be configured to assign ip addresses?
I would need to know if a radius server can be configured in such a way that it allows to assign a specific ip address to a device when it connects.
I mean, when a mobile device connects to the wifi ...
- 129
0
votes
1
answer
1k
views
FreeRADIUS - Can a username be altered?
Is there a way to alter a username before it before FreeRADIUS proxy it?
Example, you have the username "[email protected]" coming to the FreeRADIUS server, the FreeRADIUS server changes the ...
1
vote
0
answers
382
views
Disassociated WLAN (Disassociated due to inactivity)
I am reading the logs provided by an access point I have broadcasting an 802.11i (WPA) LAN network running with a radius authentication method, and the log returns the following two messages:
Aug 31 ...
- 129
1
vote
0
answers
232
views
Freeradius doesn't start when CoS user attributes are configured
I have a problem with a POC, I tried use Freeradius for authentication purpose and assign attributes for users of a broadband network (PPPoE). When I configure the user with this parameters I can ...
- 11
0
votes
0
answers
471
views
Wireless EAP / Freeradius, is there a way to check Mac Address in LDAP?
So we have EAP-PEAP over MSCHAP working. What I'd like to do is have a MAC Address check, for the purpose of making sure people aren't putting their credentials into random devices. I know SCEP would ...
0
votes
1
answer
6k
views
How to setup a proxy radius server (FreeRadius 3)
I am trying to setup a proxy Freeradius server that forwards all requests to another Freeradius server.
For reference see the following picture:
The reason for this setup is I want users to be to ...
0
votes
2
answers
7k
views
How can Freeradius assign a VLAN ID to the authenticated client?
I am using Freeradius to authenticate users in PEAP-GTC and I want it to give a VLAN ID to the authenticator which will be assigned to the port of the authenticated client.
The authenticator is ...
- 69
0
votes
2
answers
3k
views
How to fixe the number of concurrent logins per user in freeradius 3.0?
I have deployed a freeradius server version 3.0 with MySQL and Daloradius in Ubuntu 20.04 LTS.
The situation is as follows: from a mobile phone I need to connect to an access point and authenticate to ...
- 129
1
vote
0
answers
303
views
FreeRADIUS cannot bind to FreeIPA
I have installed FreeRADIUS and FreeIPA on the same machine running Fedora 33. IPA is working as expected and can have clients join and authenticate. LDAP command line tools (ldapsearch, ldapmodify) ...
- 11
1
vote
1
answer
57
views
Strongswan central authentication for already exisint users in database
I have read a lot about authenticating Strongswan to SQL/PAM but can't find any idea/solution how to authenticate against a database where already there are a plenty of username and password ...
- 13
0
votes
0
answers
625
views
Client hostname attribute in radius request
I am now trying to run logging of accounting information into my database. I use FreeRadius. I have read at glance a few RFC for radius accounting and authentication, so I expect that it is not ...
- 39
0
votes
1
answer
2k
views
keepalived - "notifiy_master"/ "notify_backup" does not start/stop application
I want to start/stop a freeradius depending on the master (start) or the backup (stop) state of the keepalived instance. The freeradius is listening for accounting messages on the shared virtual ip.
I ...
- 1
1
vote
0
answers
484
views
WPA2-EAP MSCHAP-V2 NTLM_AUTH and SQL auth
Good morning,
I've running an instance of freeradius 3.0 to use WPA2-Enterprise authentication on my wireless lan.
The authentication aggainst the AD works like a charm using ntlm_auth, but now I'm ...
- 11
0
votes
0
answers
506
views
Issue setting up freeradius, Google LDAP and Unifi Controllers
I'm trying to use freeradius as a radius server that uses Google's LDAP for a directory, for Unifi USG4's VPN.
When I don't use CHAP / MSCHAPv2, it works fine!
However, MSCHAPv2 is required.
When ...
- 93
2
votes
0
answers
379
views
OpenVPN auth with Freeradius fails with error message: Module is unknown
I have installed an OpenVPN server with Easy-RSA. I generated the certificate and signed it on my CA Server and copied it back to VPN server. I can establish the client-server connection via ...
- 1,565