Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [freeradius]

FreeRADIUS is an open source RADIUS server

0
votes
0answers
15 views

Can Freeradius integrated with ad CACHE wpa enterprise logins?

There are two offices: main and remote. At the main office, workstations are connected to the corporate wi-fi network in the WPA-Enterprise mode. They use their computer accounts to authenticate ...
0
votes
0answers
9 views

RADIUS server to point my Azure deployment to for MFA

Our developer handed me (the Sys Admin) a PowerShell script to be ran in Azure Cloud Shell. It deploys various Resource Groups and a DC hosting a private FQDN in a Test environment. One of the input ...
0
votes
1answer
22 views

Freeradius, authenticate via BASH script, authorize via LDAP group membership?

I have a custom ubuntu container containing Freeradius within a kubernetes cluster. Due to how containers work, the normal SAMBA/Winbind method of Freeradius/AD integration is not an option, so I ...
0
votes
2answers
45 views

How do I suppress logs in a kubernetes container?

I have set up a freeradius container in a kubernetes cluster. By default freeradius doesn't log authentication attempts or log passwords in plain text, however, if the service is started with the "-X" ...
0
votes
0answers
19 views

EAP-FAST with FreeRADIUS 3.0.18

I have been tasked to set up EAP-FAST in FR 3.0.18. We had EAP-FAST working fine with FR 3.0.16 but after the recent upgrade, it stopped working. Any pointers will be appreciated. EAP-FAST Mon Mar ...
0
votes
0answers
11 views

FreeRADIUS cert requirements for EAP-TLS

I have setup a FreeRADIUS server for EAP with TLS authentication. I am using my own root CA. It seems to work, but I'm not sure I properly created the certificates. The documentation has minimal ...
0
votes
0answers
9 views

Get Public IP OF Dynamic Clients freeradius

I am working on hotspot system in cloud , however I configured freeradius to accept all clients by configure client.conf by this code client 0.0.0.0/0{ shortname anythings password password } ...
0
votes
0answers
67 views

FreeRADIUS default vs. inner-tunnel sites and EAP-TLS workflow

I am trying to setup EAP-TLS with FreeRADIUS and an IPA backend. I understand that a typical workflow is to authorize the user against LDAP first and then to authenticate the user using a certificate. ...
0
votes
0answers
7 views

freeradius unlang code not working

I want expired users to access internet and put them in another ip pool to restrict their's internet bandwidth , I am using this code inside authorize section expiration{ userlock = 1 } if(userlock)...
1
vote
0answers
47 views

Suddenly RADIUS authentication is gone on macOS server (TLS session fails)

Suddenly my RADIUS authentication is gone on my MacOS Server running 10.13.6 and Server Version 5.6.1 (17S2109. I already restored the Open Directory Server. $ host name.domain.tld name.domain.tld ...
2
votes
0answers
97 views

Wired 802.1x on Windows 10 1803 isn't utilizing cache

So I’ve been trying to resolve 802.1x Wired authentication issues for quite some time now with limited success. The environment is based on Server 2012, Enterasys NAC using EAP-TLS1.2, with a ...
0
votes
1answer
83 views

Is it ok to use PAP with TTLS on radius server?

We have deployed Radius server ( Freeradius 3.x ) and connected it to our LDAP database (ForgeRock OpenDJ). We have successfully configured EAP-TTLS with valid certificates and set it as default ...
1
vote
1answer
36 views

freeradius: assign IP from specific pool filtered by user

I'm new here. I have a freeradius 3 with sqlippool and LDAP authentication (with a "guest" file-configured user), all working fine. I have 2 sqlippools: -main_pool -guest_pool I want to do the ...
1
vote
1answer
559 views

Run FreeRADIUS on FIPS enabled Redhat server?

I'm attempting to install a FreeRADIUS server on a RHEL 6.9 VM. This VM is operating in FIPS mode. I'm running into the problem described in a Red Hat bug report found here. According to that bug ...
2
votes
0answers
71 views

FreeRADIUS with Let's Enrypt Certificate (trusted connection without provisioning?)

I have a FreeRADIUS server set up for PEAP/MSCHAPv2 connections with an SQL user backend. On that server, I have set up a Let's encrypt certificate for domain access.example.org. This certificate is ...
0
votes
2answers
246 views

FreeRADIUS with LDAP vs Kerberos

The following site discusses how to setup FreeRADIUS to authenticate against an LDAP backend (it goes through a tutorial showing how to expose NT hashed passwords in FreeIPA so that FreeRADIUS can ...
0
votes
1answer
254 views

FreeRadius return User Groups in Class field

UPDATE: I have managed to get 'a group' in to the class by following this article and using memberOf as the attribute. http://lists.freeradius.org/pipermail/freeradius-users/2016-August/084450.html ...
0
votes
0answers
56 views

Zeroshell Captive portal login fails for users not in default class

Setup : ZeroShell-3.8.2 along with Zerotruth-4.0 Added new class 'Mobiles' and created new user in this class with default values from Zerotruth web page. But fails to login ( Captive portal Login ...
0
votes
2answers
454 views

radiusclient on debian 9

I have debian 9 server and want to setup a Xl2tp with radius authentication. When I add plugin radius.so on my ppp options, it try to read /etc/radiusclient and unfortunately I don't have ...
0
votes
0answers
42 views

Any way to change RADIUS source IP address in access request packet?

I have an LDAP server doing RADIUS auth to an OTP server which runs over Stunnel. The RADIUS server uses the source IP (I think this is the NAS Identifer) in the access-request packet as a key to ...
5
votes
2answers
274 views

2FA via freeRADIUS, ignoring password

I've been tasked with setting up freeRADIUS to prompt a user for their second authentication factor (eg. Google Authenticator OTP) BUT without first checking the user's password. I'm coming into this ...
0
votes
0answers
138 views

nginx captive portal radius authentication

I have multiple Ruckus Access Point and I want to provide a custom captive portal for guest authentication. The thing I want is to check if user currently has access - then switch him to the site he ...
2
votes
1answer
547 views

smb fails to start on centos7 radius server

I have a working radius server that auths connections to a PDC AD server. I wanted to create another one so that I can fail over on the firewall when needed. I created a second server using the same ...
0
votes
0answers
197 views

Freeradius User Group Membership Not Working

dictionary file: ATTRIBUTE My-Group 3003 string users file: reza My-Group := "operators", Cleartext-Password := "hello" Fall-Through := Yes bob My-Group := "...
0
votes
1answer
519 views

Unifi AP-PRO with pfSense running FreeRADIUS, with MySQL database externally

I'm in the process of moving from a set of Aerohive AP's to Unifi AP-PRO to increase the range of our wifi. Adding more Aerohives could be a solution, but they're way more expensive and I already have ...
0
votes
1answer
562 views

cannot read clients from nas table in freeradius only from clients.conf

I have installed freeradius on Centos. The MySQL database is populated with some data for testing, and the freeradiusd.conf and sql.conf are configured. The RADIUS server is able to connect with the ...
1
vote
0answers
318 views

Freeradius multi-factor auth with LDAP and Yubikey

I just set up a freeradius server and would like to be able to authenticate using both the password of a ldap user and the yubico otp generated from their yubikey. It is working using the ldap ...
0
votes
0answers
136 views

Restrict User login based on Service Type in Freeradius

Scenario: We have Freeradius v 2.2.8 along Mikrotik as Mikrotik Router as PPPoE / HOTSPOT NAS server. When we create user in freeradius, user can connect via pppoe dialer or hotspot web login both. ...
0
votes
1answer
184 views

Have freeRadius/Linuxcooperate with DHCP-Server/Windows

We have freeRadius for authentication on a Ubuntu box, but the DHCP allocation is handled elsewhere, specifically by a Win2012R2 DHCP server. Is it possible to configure freeRadius in such a way that ...
0
votes
1answer
72 views

Freeradius modules loaded in wrong order

I have a new install of Freeradius 3.0.16 on Ubuntu 18.04 The sqlcounter is not working because Freeradius is trying to load sqlcounter before the sql module. The docs says that in that case you need ...
0
votes
1answer
150 views

Update User-Name on replicate to Home Server

I'm using FreeRADIUS Version 3.0.13, and am trying to replicate accounting requests to a 3rd party server that uses the packets to do some mapping of IP's to the User-Name. The user-name doesn't ...
0
votes
1answer
610 views

Return additional attributes after FreeRADIUS authentication

I would like to return additional attributes in the response after successfully authenticating against radius. Consider the following: testuser Cleartext-Password := "testpassword" DEFAULT ...
0
votes
1answer
659 views

OpenVPN with Radius simultaneous connection

I'm trying to set-up OpenVPN server with radius authentication and accounting. Basics are working. Users can authenticate to OpenVPN server with their Radius accounts but there is a problem about ...
0
votes
0answers
339 views

freeradius config files not installed

I'm trying to install freeradius on Ubuntu 16.04 but it's not installing any conf files. I did an apt-get update and upgrade before sudo apt-get install freeradius freeradius freeradius-mysql When ...
1
vote
1answer
868 views

MSCHAPv2 authentication not working

I've been fighting with this for around a week now. I'm trying to get a RADIUS server to authenticate against our Samba-based Active Directory, but I can't get it to work. Because of our ...
1
vote
1answer
483 views

Can't authenticate radius against active directory

I'm trying to use the LDAP module to authenticate radius clients against active directory, so I need to have it actually use LDAP as the authenticator. However, it seems User-Password isn't getting ...
1
vote
1answer
623 views

“Transport encryption required” when using transport encryption

I'm trying to set up a radius server to authenticate against LDAP, but I'm running into a weird issue: rlm_ldap (ldap): Bind with radiusd@[domain] to ldaps://localhost:636 failed: Strong(er) ...
2
votes
1answer
2k views

Setup FreeRADIUS on windows [closed]

Can any one suggest where to download "FreeRADIUS" server (2.2.3) .exe for windows? I tried downloading 1.1.7 from Downloads | FreeRADIUS. It works fine but it doesn't work for TLS security. The WIFI ...
0
votes
1answer
248 views

freeradius rlm_python tagged attributes

I've created python auth module. When trying to perform testing with radtest reply is: User-Password = "testing123" NAS-IP-Address = 127.0.1.1 NAS-Port = 0 Message-Authenticator = ...
0
votes
1answer
256 views

What is expected value of SMD5-Password in freeradius' user config file?

I am using freeradius v2.1.12 on Ubuntu v14.04. Here is /etc/freeradius/users: test SMD5-Password := "{SMD5}xbYqJDY4gqVyE8Vhty//QnRlc3RpbmcxMjM=" I get this value by using the perl script from ...
0
votes
1answer
258 views

I installed freeradius using apt-get install, why it cannot find libssl when building the source?

I installed freeradius 2.1.12 to my ubuntu machine: apt-get install freeradius Then I downloaded its source, apt-get source freeradius build the source: cd freeradius-2.1.12+dfsg ./configure --...
0
votes
1answer
2k views

Why freeradius server says invalid Message-Authenticator which is generated from radtest?

I am learning how to use freeradius, the version is v2.1.12. When I run radtest, there is no response from server, I see server side debug message has the following: Received packet from 127.0.0.1 ...
0
votes
1answer
748 views

FreeRADIUS REST expansion

I am working on an integration between FreeRADIUS 3.0.15 and an API server in NodeJS, which will handle accounting, authorization and authentication. This is all documented (for instance, this repo is ...
0
votes
1answer
446 views

freeradius failover when ldap not available

I am using freeRADIUS 3.0 with two data sources: users file openldap The configuration is working fine, but when freeRADIUS is started at power-on, and LDAP server is not available, freeRADIUS ...
0
votes
1answer
330 views

freeradius hush rlm_ldap log messages

After converting from freeradius2 to freeradius3 found out rlm_ldap is really chatty: Fri Feb 2 08:02:51 2018 : Info: rlm_ldap (ldap): Closing connection (79): Hit idle_timeout, was idle for 202 ...
-5
votes
1answer
80 views

user's Internet Access logs in Network [closed]

I working on freeradius management system . user can access internet after insert his username and password . after user can access internet he will surf internet . every things go fine but my ...
1
vote
0answers
43 views

Google authentication freeRadius server stop working

It is very funny issue. THe Free radius server has been up and running for almost one year, no any issue. All the sudden it stops working this week. I test the domain user from local: radtest jzwang@...
0
votes
0answers
1k views

FreeRADIUS + LDAP w/ EAP-TLS

I need some help getting this setup. I have this almost 100% setup. I was able to auth using just LDAP, but the minute I added EAP-TLS. I"m getting mschap & mschapv2 errors. I haven't configured ...
1
vote
0answers
211 views

Freeradius Proxy eap-mschapv2 auth to non-eap Radius server

I'm using strongswan 5.6.0 & Freeradius 3.0.13 on CentOS7 as vpn server - Strongswan send radius requests to freeradius - freeradius proxy all request to another Radius Server that not support EAP ...
2
votes
1answer
3k views

FreeRadius + Active Directory + Google Authenticator

I have FreeRadius 3.0.13 installed on CentOS 7.3 which also has SSSD 1.14.0 which is being used to communicate with our Windows 2012 Domain controller. We are able to authenticate using AD via radius....