The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Questions tagged [freeradius2]

Freeradius version 2

Filter by
Sorted by
Tagged with
0
votes
0answers
13 views

Apache Proxy Radius Auth Failed To Start

So i have apache2 installed and running as a proxy, now i need to add Radius auth to allow only our own users to access our servers through the proxy, this is the setup i have for apache radius auth: ...
0
votes
0answers
31 views

sqlcounter expire_on_login mysql freeradius

sqlcounter expire_on_login mysql freeradius rlm_sqlcounter I'm trying to set access period time by first login of client first I enable sqlcounter module in mode-enable folder OS version: Ubuntu 18....
0
votes
0answers
35 views

freeradius unlang code not working

I want expired users to access internet and put them in another ip pool to restrict their's internet bandwidth , I am using this code inside authorize section expiration{ userlock = 1 } if(userlock)...
0
votes
1answer
393 views

What is expected value of SMD5-Password in freeradius' user config file?

I am using freeradius v2.1.12 on Ubuntu v14.04. Here is /etc/freeradius/users: test SMD5-Password := "{SMD5}xbYqJDY4gqVyE8Vhty//QnRlc3RpbmcxMjM=" I get this value by using the perl script from ...
0
votes
1answer
372 views

I installed freeradius using apt-get install, why it cannot find libssl when building the source?

I installed freeradius 2.1.12 to my ubuntu machine: apt-get install freeradius Then I downloaded its source, apt-get source freeradius build the source: cd freeradius-2.1.12+dfsg ./configure --...
0
votes
1answer
4k views

Why freeradius server says invalid Message-Authenticator which is generated from radtest?

I am learning how to use freeradius, the version is v2.1.12. When I run radtest, there is no response from server, I see server side debug message has the following: Received packet from 127.0.0.1 ...
0
votes
1answer
1k views

Missing raddb folder

Various tutorials on setting up a freeRADIUS server refers to the eap.conf file in the /etc/raddb folder. However when i install freeRADIUS on my ubuntu server, the eap.conf file are found in /etc/...
1
vote
0answers
232 views

Use two Auth-Type in FreeRadius

I have a RADIUS server with works with mysql, I use this RADIUS for AAA for 2 different services, Service1 uses Auth-Type as "PAP" and Service2 uses "EAP" radcheck table +-----+----------+-----------...
0
votes
1answer
2k views

freeradius radacct table is empty and fortigate

I configured freeradius with mysql and fortigate when I authorize one user every thing go fine but the radacct table is empty and there is no data was inserted into it I don't know where is the ...
0
votes
1answer
320 views

Can't get Freeradius2 to send logs to syslog-ng version 3.5

I have a Syslog-ng 3.5 and freeradius2 Ubuntu server 16.04 both running as virtual machines in a vmware esxi 5.5 HYpervisor. Well from a previous post I got sylog-ng to send logs from /var/log/...
0
votes
1answer
1k views

Freeradius not redirecting logs to syslog-ng

Good Afternoon. I have a problem with a Freeradius 2 server in UBuntu 16.04 Is installed from a template in a vmware 5.5 Hypervisor ans since lacks of HHD space, logs start collapsing the system, the ...
1
vote
1answer
1k views

openvpn radius-plugin does not assign framed-ip-address from freeradius to clients

I am new to openvpn. I have an openvpn setup on ubuntu 14.04 which has a radius AAA backend for authentication, authorization and accounting. In addition to this, we have configured freeradius to ...
3
votes
3answers
1k views

OpenWRT Dynamic VLAN

I'm setting up an wireless AP with OpenWRT to support dynamic vlan's, provided by a RADIUS server. I found a guide on OpenWRT.org which I followed, and with some extra research I'm almost there. The ...
1
vote
0answers
104 views

Can a FreeRadius presenting a SHA1 certificate accept SHA2 client certificates and validate them against a CA that accepts SHA1 and SHA2 certificates?

Can a FreeRadius presenting a SHA1 certificate accept SHA2 client certificates and validate them against a CA that accepts SHA1 and SHA2 certificates? Another option would be that the FreeRadius ...
0
votes
1answer
832 views

FreeRadius configure two different authentication types

Have a particular scenario in that we would like to use FreeRadius to log into switchs using Kerberos credentials and network devices using EAP-TLS. Currently have this configured and working, but ...
3
votes
1answer
4k views

Use Framed-IP-Address RADIUS attribute for IP allocation with DHCP on Windows Server 2012R2

I have configured a DHCP server on Windows Server with an NPS Policy, connected to a FreeRADIUS2 server running on pfSense. Authentication is based on MAC address. If MAC address is not present in ...
2
votes
0answers
2k views

Freeradius radacct table is empty

I am using Freeradius 2 in FreeBSD server. The server is able to authenticate the user in MySQL database but i found that radacct table is not updated. I have check the configuration in the /sites-...
0
votes
1answer
232 views

Poptop configured for freeradius but still authenticates through chap

I'm running Centos 6 64 bit with Poptop and radiusclient. When I connect to my poptop server this error comes up in the error log: Feb 21 14:40:42 alpha pptpd[13225]: CTRL: Client **** control ...
0
votes
1answer
3k views

Mikrotik and Freeradius (user time limit)

I am using freeradius in order to authenticate users to access the internet over a mikrotik routerboard. I would like to set up a maximum time limit in a default period of time in the mysql database. ...
0
votes
1answer
1k views

Freeradius LDAP through AP

I need help with a connection to RADIUS throught Access Point LevelOne EAP-110. I configured RADIUS + LDAP, tried with radiusd -X I get this message: radtest fsobarzo ********** localhost 100 ...
1
vote
2answers
854 views

Cisco Aironet AP1260 can't reach FreeRADIUS server

I have a problem with a Cisco Aironet AP1260 standalone access point and a FreeRADIUS server. I'm trying to set up a 802.11x access point with authentication on a FreeRADIUS server. I have set up both ...
0
votes
1answer
674 views

Authenticate Radius with LDAP Group

I'm trying to authenticate specific LDAP group with FreeRadius. I need to apply this checking inside a virtual-server, as there are two different groups and i'm using a single Unix Box. Any ...
0
votes
1answer
1k views

Setting variable depending on NAS-IP-Address in Freeradius

The setup We currently have a Freeradius server used to authenticate our Wifi users against our Active Directory server. The link between Freeradius and the Active Directory is done by Winbind. In ...
1
vote
1answer
2k views

“Certificate not trusted error” for eap-tls

I'm setting up freeradius as the authentication server for 802.1x. While testing the config using rad_eap_test, the server returns the following error: [tls] <<< TLS 1.0 Handshake [length ...
0
votes
0answers
543 views

Exchange Server 2013 and RADIUS server(freeRADIUS2)

I am a student and doing an internship. I have to test Microsoft Exchange Server 2013. I am using Windows Server 2012, I already installed Exchange Server 2013 on it and everything works as intended. ...
2
votes
1answer
12k views

How to use Calling-Station-Id on a per user basis in freeRADIUS?

I am trying to limit every user to a small set of Mac-IDs in RADIUS, by directly including the appropriate information in the users file. It would be acceptable even if every user was limited to one ...
0
votes
1answer
3k views

Multiple NAS-IP-Address check attributes in FreeRadius?

is it possible to have an OR statement in freeradius check attributes? I have say 10 VPN servers that authenticate from freeradius. Most users can access all servers but I have a demo user that can ...
0
votes
1answer
6k views

How to accept all connections in freeradius2?

I need to setup radius that accept any username/password and give some attrs for mpd. Something like: (raddb/users) DEFAULT Framed-Protocol == PPP ...
0
votes
1answer
2k views

Mpd as pppoe server with authorisation by freeradius2

I install freeradius2, add to raddb/users: test Cleartext-Password := "test1" Service-Type = Framed-User, Framed-Protocol = PPP, Framed-IP-Address = 10.36.0.2, Framed-IP-Netmask = 255....
4
votes
2answers
7k views

Using SHA1 user password fields in freeradius radius server

I have proprietary web application which stores user password in form of sha1$79b2c$b3704ec5703ef28ded379cf6c6de4c4160aa029b. This is a salted sha1 hash. I want to use this presaved information for ...
1
vote
1answer
11k views

Reload Freeradius clients without restart the service

Is there a way to reload the Freeradius clients configuration without restarting the service? I'm using: Ubuntu Server 12 Freeradius 2.1.10 MySQL v5.5.20 (I'm storing the clients in the "nas" table)
3
votes
2answers
11k views

Freeradius authentication failed for unknown reason

I followed this instruction to force freeradius to use mysql database. and run freeradius in debug mod. but it rejects all authentication. mysql database : mysql> select * from radcheck; +----+-----...
2
votes
2answers
5k views

Restrict FreeRADIUS clients to access service from different LANs with same user and password

I have FreeRADIUS installed on my server, and also have two LANs (or may be more) managed by this server. Let's say LAN A:192.168.1.0, and LAN B: 192.168.2.0. I'm using FreeRADIUS in combination with ...
1
vote
2answers
5k views

Redundant FreeRADIUS + MySQL

I’m working on some web service having it’s AAA implemented by FreeRADIUS + MySQL on Debian. The problem I’m working right now is HA & scalability of RADIUS. If the FreeRADIUS machine or MySQL ...
5
votes
2answers
5k views

FreeRADIUS2 and LDAP Authentication

I am currently running a CentOS 5.5 box with FreeRADIUS2 on it. I have the simple authentication turned on right now (username and pass is set via /etc/raddb/users). I want to have FreeRADIUS ...
8
votes
2answers
601 views

FreeRADIUS 2 should use a different Python than default

We've got a FreeRADIUS 2 deamon installed on a CentOS 5.7 server. We'd like to use a pre-written Python module to do authorization but there's a problem: The Python module we've got requires Python ...
1
vote
1answer
2k views

Monitor freeradius for failed login attempts and trigger email to user

We have 2 freeradius authentication servers which service around 12k users. Users often enter incorrect credentials and this causes significant strain on the helpdesk. I'd like to write a script to ...
0
votes
1answer
3k views

Freeradius on Linux with dynamic VLAN assignment via AD

I've been trying to configure my freeradius server on Linux to authenticate users from an existing Active Directory (windows server 2003) and i've already done that. Now i need to assign VLANs to ...
1
vote
1answer
5k views

FreeRADIUS Authentication Fails

I'm using an SQL database of accounts for FreeRADIUS to authenticate against. I'm managing these accounts using the default Dialup Admin interface. I have created a test user - testing123 and given it ...
1
vote
1answer
1k views

Can freeradius bypass authentication for one realm only?

I have a question similar to this one, but without the VLAN complications. How can(?) I configure FreeRadius 1.x to allow any combination of username/password for one realm only? If FreeRadius 1.x ...
0
votes
1answer
211 views

Will RADIUS allow me to have authentication from an SBS domain in a 2003 domain?

I'm no RADIUS expert. But my understanding is that RADIUS can use Active Directory as a 'realm' to authenticate. This got me thinking - We have 3 separate clients in one building, and we manage the ...
0
votes
2answers
23k views

How to configure FreeRadius to accept all authentication requests?

I'm attempting to configure FreeRadius to work with Dynamic VLAN Assignment. What I'm attempting to do, is return a specific VLAN ID for known hosts, but return a default VLAN ID for unknown hosts. ...
0
votes
1answer
509 views

freeradius authenticate over ldap log files

when config free-radius to authenticate over ldap where are the log files that store usernames and other connected client info? excuse me for my bad English.
0
votes
1answer
4k views

pam_auth_radius - RADIUS users vs unix users

I have recently set up a server with FreeRADIUS to authenticate and keep track of admin logins on some of my devices. I'm looking at getting my Linux and FreeBSD machines authenticating against ...
10
votes
4answers
44k views

openVPN disconnect via command line in linux

Is there a way to disconnect an openvpn connection that was established by free-radius with a shell command line? I have all information about the openvpn connection: Username Client IP ...
0
votes
2answers
658 views

freeradius maximum session time problem

I'm using openvpn and free-radius for control user accounts. for maximum session time for an user, free-radius has sqlcounter.conf that control that, but after a connection has disconnected that is ...
1
vote
1answer
398 views

FreeRADIUS Default Answer

We are using FreeRADIUS with a MySQL database, authenticating users. We ran into an issue where are MySQL database was slow causing the max number of threads to be reached. The issue with this is, ...
3
votes
1answer
4k views

Radius Certificate Based (eap) Authentication

We are currently putting in place a freeradius server that uses certificates to authenticate via a wireless connection. We have this working for 802.1x but Novell's client for Windows 7 breaks the 802....