Questions tagged [freeradius]

FreeRADIUS is an open source RADIUS server

Filter by
Sorted by
Tagged with
1 vote
1 answer
28 views

Freeradius with dhcp server: Calls to perl module returns error

This is a continuation of my previous question in sending static routes from Freeradius DHCP server implementation in combination with Strongswan VPN server. When debugging Freeradius using tcpdump ...
user avatar
0 votes
0 answers
28 views

(FREERADIUS&MYSQL) Getting aborted connections to my db (got an error reading communication packets)

https://i.stack.imgur.com/qUI2n.png Running Debian 11, 1 week trying to figure out where this issue comes from, tried authentication method (made a fresh install of mariadb, setting unix socket so ...
user avatar
  • 1
0 votes
1 answer
294 views

Daloradius ERROR: (3) sql: ERROR: rlm_sql_mysql: ERROR 1054 (Unknown column 'acctupdatetime' in 'field list')

Getting the following error after configuring freeradius with daloradius. ERROR: (3) sql: ERROR: rlm_sql_mysql: ERROR 1054 (Unknown column 'acctupdatetime' in 'field list') Radius server accounting ...
user avatar
  • 121
0 votes
0 answers
20 views

Is there a freeradius configuration to ignore requests from users or specific sources?

I've got a little server running freeradius for a handful of systems that I don't have any control over the firewalling or configuration for. (i.e. I can't control what it sends to me, but I need to ...
user avatar
  • 2,408
0 votes
0 answers
69 views

FreeRADIUS accept any password for one user only

I need to configure one user on FreeRADIUS to authenticate and generate an access-accept regardless of the password submitted by the user. I can see how to do this for all users, but how can I do this ...
user avatar
0 votes
0 answers
159 views

Implementing rfc3442 (classless static route) in Freeradius DHCP server

I am trying to setup a Strongswan server that runs in split tunnel mode, which means I have to disable using the server as a default gateway on client side and also disable classfull routing in the ...
user avatar
0 votes
0 answers
39 views

accounting Squid clients using freeradius

sorry I'm a very newbie in freeradius, and I try to create a VPN server using squid and check user sessions using freeradius. everything is ok, except the accounting and checking the sessions. my goal ...
user avatar
  • 101
0 votes
0 answers
20 views

I want to know how to change ip from expire pool to normal after date is extended

I been searching for a solution regarding freeradius revert from expired pool to normal pool when the user paid. I just entered a date and time for a particular user for expiry in mysql. MYSQL ...
user avatar
  • 1
0 votes
0 answers
70 views

FreeRadius with mixed CAs

Is it possible to run FreeRadius (version 3.0.13) with two different CAs? So that I have a server certificate from one CA and the client certificates come from a different CA? Our current setup in /...
user avatar
  • 135
0 votes
1 answer
59 views

freeradius and openldap : vlan attribution working with radtest but not with wpa_supplicant

Both of my services freeradius and openldap are on the same server. The schema Freeradius is loaded into openldap. I configured the radiusProfileDN of a user to link to a group. In this group, I have ...
user avatar
0 votes
0 answers
88 views

Multiple NAS-IP-Address check attributes in FreeRadius 3.x

In 2.x I can add a attributes in radcheck table use the =~ operator, and a regex xxx.xxx.xxx.1|xxx.xxx.xxx.2 insert into radcheck (username,attribute,op,value) values ('username','NAS-IP-Address','=~',...
user avatar
  • 1
0 votes
0 answers
48 views

Freeradius 3.0 accept all IP Address

I found the following code on the internet to allow all IP in freeradius client.conf file, client 0.0.0.0/0 { secret = 12345 shortname = name } But This is not working in freeradius 3.0 , it is ...
user avatar
1 vote
1 answer
298 views

Freeradius: Authenticate users on certain condition

There is a network where users are using PPPoE to establish connections to the Access servers. We have lost the billing system and users' DB. The only condition that we know is that 'Valid credential ...
user avatar
0 votes
0 answers
42 views

How can Freeradius assign a VLAN ID to the device behing the IP phone

I am able to authenticate the IP phone but the pc port through which the users get to the LAN do not get assigned.I observed the pc is being dropped into the same vlan as the phone.The Lan USERs are ...
user avatar
-1 votes
2 answers
413 views

Configuring FreeRADIUS to log user commands

I need to be able to configure a radius server to log users' activities like the commands they're running whilst they were logged into a client device. Entries should be made in the /var/log/...
user avatar
3 votes
2 answers
2k views

How to encrypt user password in Freeradius

I recently set up a freeradius server and would like to change the user password that is presently in cleartext to encrypted in the /etc/freeradius/3.0/users file. This is what it looks like on the ...
user avatar
0 votes
2 answers
279 views

Can radius be configured to assign ip addresses?

I would need to know if a radius server can be configured in such a way that it allows to assign a specific ip address to a device when it connects. I mean, when a mobile device connects to the wifi ...
user avatar
0 votes
0 answers
201 views

Cisco Access point. Freeradius. Dynamic VLAN assignment. DHCP fail to obtain address

I have a configuration from topic. Two VLAN 102 and 110. dot11 ssid test1 vlan 110 authentication open eap wifi_login authentication network-eap wifi_login authentication key-management ...
user avatar
  • 103
0 votes
1 answer
181 views

FreeRADIUS - Can a username be altered?

Is there a way to alter a username before it before FreeRADIUS proxy it? Example, you have the username "abcuser@abc.com" coming to the FreeRADIUS server, the FreeRADIUS server changes the ...
user avatar
1 vote
0 answers
89 views

Disassociated WLAN (Disassociated due to inactivity)

I am reading the logs provided by an access point I have broadcasting an 802.11i (WPA) LAN network running with a radius authentication method, and the log returns the following two messages: Aug 31 ...
user avatar
0 votes
0 answers
60 views

FreeRadius with Active Directory and Google Authenticator

I would like to do the following setup for 2 factor authentication: AD Password + OTP using google authenticator. I am using freeradius. Does anyone has a helpful guide to perform this task? ...
user avatar
0 votes
0 answers
170 views

FreeRADIUS - How to RADIUS Proxy based on source IP?

I am currently working on building a RADIUS Proxy solution with RHEL and FreeRADIUS. As I am expecting to integrate the solution with hundreds of RADIUS Clients and RADIUS Servers, the realm proxy ...
user avatar
0 votes
0 answers
159 views

Regarding freeradius rlm_rest module configuration to authenticate user from elasticsearch

I'm trying to authenticate user using rest module in freeradius, user data is stored in elasticsearch database. testing using: < radtest -x chandanbr 008627 localhost 0 testing123 > i'm getting ...
user avatar
1 vote
0 answers
98 views

Freeradius doesn't start when CoS user attributes are configured

I have a problem with a POC, I tried use Freeradius for authentication purpose and assign attributes for users of a broadband network (PPPoE). When I configure the user with this parameters I can ...
user avatar
0 votes
0 answers
23 views

Why freeradius and simultaneouse-use doesn't work?

I installed freeradius + mysql + daloradius everything works fine except the simultaneous-use option. Without this option a login can be used simultaneously. Which causes me trouble. Here are my ...
user avatar
  • 1
0 votes
0 answers
154 views

Wireless EAP / Freeradius, is there a way to check Mac Address in LDAP?

So we have EAP-PEAP over MSCHAP working. What I'd like to do is have a MAC Address check, for the purpose of making sure people aren't putting their credentials into random devices. I know SCEP would ...
user avatar
0 votes
0 answers
56 views

Freeradius log - Opening additional connection (rlm_sql)

forgive my lack of knowledge but I am new to this topic and there are a few concepts that elude me. When I view the radius logs in my server I get the following information: root@pabx:~# tail -f /var/...
user avatar
0 votes
0 answers
88 views

How to periodically flush mysql radpostauth table (freeradius)?

I have deployed a freeradius server version 3.0 with MySQL in Debian 10. user@host:~# mysql -V mysql Ver 15.1 Distrib 10.3.27-MariaDB, for debian-linux-gnu (x86_64) using readline 5.2 user@host:~# ...
user avatar
0 votes
1 answer
2k views

How to setup a proxy radius server (FreeRadius 3)

I am trying to setup a proxy Freeradius server that forwards all requests to another Freeradius server. For reference see the following picture: The reason for this setup is I want users to be to ...
user avatar
0 votes
1 answer
2k views

How can Freeradius assign a VLAN ID to the authenticated client?

I am using Freeradius to authenticate users in PEAP-GTC and I want it to give a VLAN ID to the authenticator which will be assigned to the port of the authenticated client. The authenticator is ...
user avatar
  • 59
-1 votes
2 answers
1k views

How to fixe the number of concurrent logins per user in freeradius 3.0?

I have deployed a freeradius server version 3.0 with MySQL and Daloradius in Ubuntu 20.04 LTS. The situation is as follows: from a mobile phone I need to connect to an access point and authenticate to ...
user avatar
1 vote
0 answers
156 views

FreeRADIUS cannot bind to FreeIPA

I have installed FreeRADIUS and FreeIPA on the same machine running Fedora 33. IPA is working as expected and can have clients join and authenticate. LDAP command line tools (ldapsearch, ldapmodify) ...
user avatar
  • 11
1 vote
1 answer
29 views

Strongswan central authentication for already exisint users in database

I have read a lot about authenticating Strongswan to SQL/PAM but can't find any idea/solution how to authenticate against a database where already there are a plenty of username and password ...
user avatar
  • 13
0 votes
0 answers
223 views

Client hostname attribute in radius request

I am now trying to run logging of accounting information into my database. I use FreeRadius. I have read at glance a few RFC for radius accounting and authentication, so I expect that it is not ...
user avatar
0 votes
1 answer
689 views

keepalived - "notifiy_master"/ "notify_backup" does not start/stop application

I want to start/stop a freeradius depending on the master (start) or the backup (stop) state of the keepalived instance. The freeradius is listening for accounting messages on the shared virtual ip. I ...
user avatar
  • 1
1 vote
0 answers
220 views

WPA2-EAP MSCHAP-V2 NTLM_AUTH and SQL auth

Good morning, I've running an instance of freeradius 3.0 to use WPA2-Enterprise authentication on my wireless lan. The authentication aggainst the AD works like a charm using ntlm_auth, but now I'm ...
user avatar
  • 11
0 votes
0 answers
351 views

Issue setting up freeradius, Google LDAP and Unifi Controllers

I'm trying to use freeradius as a radius server that uses Google's LDAP for a directory, for Unifi USG4's VPN. When I don't use CHAP / MSCHAPv2, it works fine! However, MSCHAPv2 is required. When ...
user avatar
2 votes
0 answers
277 views

OpenVPN auth with Freeradius fails with error message: Module is unknown

I have installed an OpenVPN server with Easy-RSA. I generated the certificate and signed it on my CA Server and copied it back to VPN server. I can establish the client-server connection via ...
user avatar
  • 1,263
1 vote
1 answer
672 views

FreeRadius doesn't log request in Debug mode

Sorry, Radius newbie here … I try to get a FreeRadius server version 3.0.20 as packaged by NixOS running to authenticate users on a dlink access point. I'm running the server with debug logging ...
user avatar
0 votes
0 answers
822 views

FreeRadius 3 + sqlippool

I have a basic configured FreeRadius in conjunction with Postgresql and Mikrotik. The SQL module is configured correctly and PPPoE authorization through the database works. I need to connect and ...
user avatar
0 votes
0 answers
195 views

freeradius and configure eap or pap with rest

free radius and configure eap or pap with rest i want use strongswan with free radius and rest module, i see sql and eap work together, how can configure eap with rest ? the important part is ...
user avatar
0 votes
0 answers
252 views

how conncet ibsng as redius server to strongswan

I want to use ibsng (on centos 6) as a Radius server and manage my strongswan accounts (on centos 7). https://wiki.strongswan.org/projects/strongswan/wiki/EapRadius I made these settings and set up ...
user avatar
0 votes
1 answer
944 views

how to send log from post-auth with Freeradius?

I want to send message to remote syslog in post-auth section. Simple string with "'%{User-Name}', '%{reply:Packet-Type}', '%{Calling-Station-Id}'" How do it with FreeRADIUS 3 ? Or.. How to split ...
user avatar
  • 264
0 votes
1 answer
572 views

FreeRADIUS3 - ERROR: Failed parsing output from exec, expecting operator

FreeRADIUS 3 for OTP authentication, authentication succeeds, however FreeRADIUS fails to parse the response. Sending the test command and monitoring the debug output (radiusd -X), there is an error ...
user avatar
0 votes
1 answer
318 views

Strange FreeRadius and Kerberos issue

Currently I am trying to get my FreeRadius server to talk to my FreeIPA server and through some Googling I discovered I need to have FreeRadius talk to Kerberos in order to do user look ups. So I make ...
user avatar
  • 3
1 vote
0 answers
80 views

How can I enforce cryptobinding on FreeRADIUS?

On NPS, there's a setting "Disconnect clients without cryptobinding", which should force clients to check the security of the comms which, if I understand correctly, will prevent attacks such as ...
user avatar
  • 111
0 votes
1 answer
2k views

How to configure FreeRADIUS with EAP-TLS and group-based authorization?

I configured FreeRADIUS to use EAP-TLS for certificate based authentication (self-signed certificates). Authentication works fine, except that I'd like to add group-based authorization. More ...
user avatar
0 votes
1 answer
755 views

How to configure FreeRADIUS for use with strongSwan group selection?

Building a VPN service with strongSwan, I need to distinguish between several groups of users where each group is assigned a certain subnet with certain permissions (i.e. "group x" has access only to ...
user avatar
0 votes
1 answer
161 views

Requesting access to a Radius server after having requested a previous (succeful) access to another Radius server

I don't know if this idea is non-sense but I was wondering if it was possible. I have a FreeRadius server backed by a LDAP server with uses EAP-TTLS (that is, username+password) to authenticate. So ...
user avatar
  • 135
0 votes
1 answer
2k views

Freeradius 3.0.12 doesn't send any data through mysql

After upgrading from v 2.x, freeradius stopped working for me. I have done multiple tshooting steps which led me to believe that the application is not sending any data through MySQL, even though it ...
user avatar
  • 1

1
2 3 4 5 6