Questions tagged [freeradius2]
Freeradius version 2
48
questions
0
votes
0
answers
289
views
(FREERADIUS&MYSQL) Getting aborted connections to my db (got an error reading communication packets)
https://i.stack.imgur.com/qUI2n.png
Running Debian 11, 1 week trying to figure out where this issue comes from, tried authentication method (made a fresh install of mariadb, setting unix socket so ...
- 1
0
votes
1
answer
1k
views
FreeRADIUS accept any password for one user only
I need to configure one user on FreeRADIUS to authenticate and generate an access-accept regardless of the password submitted by the user. I can see how to do this for all users, but how can I do this ...
- 277
0
votes
1
answer
728
views
Radius authentication does not work in Strongswan, when comming from a Windows VPN client?
My strongswan VPN server is authenticating VPN clients against a local Freeradius server.
All user logings is proxied to remote radius server, that validates users against a Samba Active Directory ...
0
votes
1
answer
5k
views
How to setup a proxy radius server (FreeRadius 3)
I am trying to setup a proxy Freeradius server that forwards all requests to another Freeradius server.
For reference see the following picture:
The reason for this setup is I want users to be to ...
0
votes
1
answer
716
views
What is expected value of SMD5-Password in freeradius' user config file?
I am using freeradius v2.1.12 on Ubuntu v14.04. Here is /etc/freeradius/users:
test SMD5-Password := "{SMD5}xbYqJDY4gqVyE8Vhty//QnRlc3RpbmcxMjM="
I get this value by using the perl script from ...
- 151
0
votes
1
answer
823
views
I installed freeradius using apt-get install, why it cannot find libssl when building the source?
I installed freeradius 2.1.12 to my ubuntu machine:
apt-get install freeradius
Then I downloaded its source,
apt-get source freeradius
build the source:
cd freeradius-2.1.12+dfsg
./configure --...
- 151
5
votes
2
answers
13k
views
Why freeradius server says invalid Message-Authenticator which is generated from radtest?
I am learning how to use freeradius, the version is v2.1.12. When I run radtest, there is no response from server, I see server side debug message has the following:
Received packet from 127.0.0.1 ...
- 151
0
votes
1
answer
3k
views
Missing raddb folder
Various tutorials on setting up a freeRADIUS server refers to the eap.conf file in the /etc/raddb folder. However when i install freeRADIUS on my ubuntu server, the eap.conf file are found in /etc/...
- 103
1
vote
0
answers
381
views
Use two Auth-Type in FreeRadius
I have a RADIUS server with works with mysql, I use this RADIUS for AAA for 2 different services,
Service1 uses Auth-Type as "PAP" and Service2 uses "EAP"
radcheck table
+-----+----------+-----------...
0
votes
1
answer
3k
views
freeradius radacct table is empty and fortigate
I configured freeradius with mysql and fortigate
when I authorize one user every thing go fine but the radacct table is empty and there is no data was inserted into it
I don't know where is the ...
0
votes
1
answer
493
views
Can't get Freeradius2 to send logs to syslog-ng version 3.5
I have a Syslog-ng 3.5 and freeradius2 Ubuntu server 16.04 both running as virtual machines in a vmware esxi 5.5 HYpervisor.
Well from a previous post I got sylog-ng to send logs from /var/log/...
- 7
0
votes
1
answer
2k
views
Freeradius not redirecting logs to syslog-ng
Good Afternoon. I have a problem with a Freeradius 2 server in UBuntu 16.04
Is installed from a template in a vmware 5.5 Hypervisor ans since lacks of HHD space, logs start collapsing the system, the ...
- 7
1
vote
1
answer
3k
views
openvpn radius-plugin does not assign framed-ip-address from freeradius to clients
I am new to openvpn. I have an openvpn setup on ubuntu 14.04 which has a radius AAA backend for authentication, authorization and accounting. In addition to this, we have configured freeradius to ...
- 59
3
votes
4
answers
3k
views
OpenWRT Dynamic VLAN
I'm setting up an wireless AP with OpenWRT to support dynamic vlan's, provided by a RADIUS server.
I found a guide on OpenWRT.org which I followed, and with some extra research I'm almost there. The ...
1
vote
0
answers
133
views
Can a FreeRadius presenting a SHA1 certificate accept SHA2 client certificates and validate them against a CA that accepts SHA1 and SHA2 certificates?
Can a FreeRadius presenting a SHA1 certificate accept SHA2 client certificates and validate them against a CA that accepts SHA1 and SHA2 certificates?
Another option would be that the FreeRadius ...
0
votes
1
answer
2k
views
FreeRadius configure two different authentication types
Have a particular scenario in that we would like to use FreeRadius to log into switchs using Kerberos credentials and network devices using EAP-TLS.
Currently have this configured and working, but ...
- 1
3
votes
1
answer
6k
views
Use Framed-IP-Address RADIUS attribute for IP allocation with DHCP on Windows Server 2012R2
I have configured a DHCP server on Windows Server with an NPS Policy, connected to a FreeRADIUS2 server running on pfSense.
Authentication is based on MAC address. If MAC address is not present in ...
- 31
2
votes
0
answers
2k
views
Freeradius radacct table is empty
I am using Freeradius 2 in FreeBSD server.
The server is able to authenticate the user in MySQL database but i found that radacct table is not updated. I have check the configuration in the /sites-...
- 21
0
votes
1
answer
319
views
Poptop configured for freeradius but still authenticates through chap
I'm running Centos 6 64 bit with Poptop and radiusclient. When I connect to my poptop server this error comes up in the error log:
Feb 21 14:40:42 alpha pptpd[13225]: CTRL: Client **** control ...
- 11
0
votes
1
answer
4k
views
Mikrotik and Freeradius (user time limit)
I am using freeradius in order to authenticate users to access the internet over a mikrotik routerboard.
I would like to set up a maximum time limit in a default period of time in the mysql database. ...
0
votes
1
answer
1k
views
Freeradius LDAP through AP
I need help with a connection to RADIUS throught Access Point LevelOne EAP-110.
I configured RADIUS + LDAP, tried with radiusd -X I get this message:
radtest fsobarzo ********** localhost 100 ...
- 1
1
vote
2
answers
1k
views
Cisco Aironet AP1260 can't reach FreeRADIUS server
I have a problem with a Cisco Aironet AP1260 standalone access point and a FreeRADIUS server.
I'm trying to set up a 802.11x access point with authentication on a FreeRADIUS server.
I have set up both ...
- 11
0
votes
1
answer
907
views
Authenticate Radius with LDAP Group
I'm trying to authenticate specific LDAP group with FreeRadius.
I need to apply this checking inside a virtual-server, as there are two different groups and i'm using a single Unix Box.
Any ...
- 1,053
0
votes
2
answers
2k
views
Setting variable depending on NAS-IP-Address in Freeradius
The setup
We currently have a Freeradius server used to authenticate our Wifi users against our Active Directory server. The link between Freeradius and the Active Directory is done by Winbind.
In ...
- 7,314
1
vote
1
answer
3k
views
"Certificate not trusted error" for eap-tls
I'm setting up freeradius as the authentication server for 802.1x.
While testing the config using rad_eap_test, the server returns the following error:
[tls] <<< TLS 1.0 Handshake [length ...
2
votes
1
answer
15k
views
How to use Calling-Station-Id on a per user basis in freeRADIUS?
I am trying to limit every user to a small set of Mac-IDs in RADIUS, by directly including the appropriate information in the users file. It would be acceptable even if every user was limited to one ...
- 123
0
votes
2
answers
4k
views
Multiple NAS-IP-Address check attributes in FreeRadius?
is it possible to have an OR statement in freeradius check attributes?
I have say 10 VPN servers that authenticate from freeradius. Most users can access all servers but I have a demo user that can ...
- 171
0
votes
1
answer
9k
views
How to accept all connections in freeradius2?
I need to setup radius that accept any username/password and give some attrs for mpd.
Something like: (raddb/users)
DEFAULT Framed-Protocol == PPP ...
- 2,250
0
votes
1
answer
2k
views
Mpd as pppoe server with authorisation by freeradius2
I install freeradius2, add to raddb/users:
test Cleartext-Password := "test1"
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-IP-Address = 10.36.0.2,
Framed-IP-Netmask = 255....
- 2,250
4
votes
2
answers
9k
views
Using SHA1 user password fields in freeradius radius server
I have proprietary web application which stores user password in form of sha1$79b2c$b3704ec5703ef28ded379cf6c6de4c4160aa029b. This is a salted sha1 hash.
I want to use this presaved information for ...
- 688
3
votes
1
answer
20k
views
Reload Freeradius clients without restart the service
Is there a way to reload the Freeradius clients configuration without restarting the service? I'm using:
Ubuntu Server 12
Freeradius 2.1.10
MySQL v5.5.20 (I'm storing the clients in the "nas" table)
- 193
3
votes
2
answers
12k
views
Freeradius authentication failed for unknown reason
I followed this instruction to force freeradius to use mysql database.
and run freeradius in debug mod.
but it rejects all authentication.
mysql database :
mysql> select * from radcheck;
+----+--------...
- 241
2
votes
2
answers
6k
views
Restrict FreeRADIUS clients to access service from different LANs with same user and password
I have FreeRADIUS installed on my server, and also have two LANs (or may be more) managed by this server. Let's say LAN A:192.168.1.0, and LAN B: 192.168.2.0. I'm using FreeRADIUS in combination with ...
- 541
1
vote
2
answers
6k
views
Redundant FreeRADIUS + MySQL
I’m working on some web service having it’s AAA implemented by FreeRADIUS + MySQL on Debian.
The problem I’m working right now is HA & scalability of RADIUS. If the FreeRADIUS machine or MySQL ...
- 11
5
votes
2
answers
5k
views
FreeRADIUS2 and LDAP Authentication
I am currently running a CentOS 5.5 box with FreeRADIUS2 on it. I have the simple authentication turned on right now (username and pass is set via /etc/raddb/users). I want to have FreeRADIUS ...
- 73
8
votes
2
answers
666
views
FreeRADIUS 2 should use a different Python than default
We've got a FreeRADIUS 2 deamon installed on a CentOS 5.7 server.
We'd like to use a pre-written Python module to do authorization but there's a problem: The Python module we've got requires Python ...
- 273
1
vote
1
answer
3k
views
Monitor freeradius for failed login attempts and trigger email to user
We have 2 freeradius authentication servers which service around 12k users. Users often enter incorrect credentials and this causes significant strain on the helpdesk. I'd like to write a script to ...
- 923
0
votes
1
answer
4k
views
Freeradius on Linux with dynamic VLAN assignment via AD
I've been trying to configure my freeradius server on Linux to authenticate users from an existing Active Directory (windows server 2003) and i've already done that. Now i need to assign VLANs to ...
- 1
1
vote
1
answer
5k
views
FreeRADIUS Authentication Fails
I'm using an SQL database of accounts for FreeRADIUS to authenticate against. I'm managing these accounts using the default Dialup Admin interface. I have created a test user - testing123 and given it ...
- 344
1
vote
1
answer
2k
views
Can freeradius bypass authentication for one realm only?
I have a question similar to this one, but without the VLAN complications. How can(?) I configure FreeRadius 1.x to allow any combination of username/password for one realm only?
If FreeRadius 1.x ...
- 1,775
0
votes
1
answer
217
views
Will RADIUS allow me to have authentication from an SBS domain in a 2003 domain?
I'm no RADIUS expert. But my understanding is that RADIUS can use Active Directory as a 'realm' to authenticate.
This got me thinking - We have 3 separate clients in one building, and we manage the ...
- 1,178
0
votes
2
answers
26k
views
How to configure FreeRadius to accept all authentication requests?
I'm attempting to configure FreeRadius to work with Dynamic VLAN Assignment.
What I'm attempting to do, is return a specific VLAN ID for known hosts, but return a default VLAN ID for unknown hosts.
...
- 7,588
0
votes
1
answer
721
views
freeradius authenticate over ldap log files
when config free-radius to authenticate over ldap where are the log files that store usernames and other connected client info?
excuse me for my bad English.
- 389
0
votes
1
answer
5k
views
pam_auth_radius - RADIUS users vs unix users
I have recently set up a server with FreeRADIUS to authenticate and keep track of admin logins on some of my devices.
I'm looking at getting my Linux and FreeBSD machines authenticating against ...
- 1,558
14
votes
6
answers
89k
views
openVPN disconnect via command line in linux
Is there a way to disconnect an openvpn connection that was established by free-radius with a shell command line?
I have all information about the openvpn connection:
Username
Client IP
...
- 389
0
votes
2
answers
778
views
freeradius maximum session time problem
I'm using openvpn and free-radius for control user accounts. for maximum session time for an user, free-radius has sqlcounter.conf that control that, but after a connection has disconnected that is ...
- 389
1
vote
1
answer
445
views
FreeRADIUS Default Answer
We are using FreeRADIUS with a MySQL database, authenticating users. We ran into an issue where are MySQL database was slow causing the max number of threads to be reached. The issue with this is, ...
- 443
3
votes
1
answer
4k
views
Radius Certificate Based (eap) Authentication
We are currently putting in place a freeradius server that uses certificates to authenticate via a wireless connection. We have this working for 802.1x but Novell's client for Windows 7 breaks the 802....
- 496