Questions tagged [freeradius]
FreeRADIUS is an open source RADIUS server
288
questions
2
votes
2
answers
6k
views
Is there a list of FreeRADIUS specific attributes?
I am using FreeRADIUS 2.1.12 with PostgreSQL for user and client (nas) auth. I'm a bit new to this--I learned what RADIUS was when I was assigned to set this server up a couple of weeks ago--so pardon ...
1
vote
2
answers
3k
views
Freeradius and self signed-certificate
our current wi-fi infrastructure is based on a Debian box that hosts Freeradius with LDAP backend. Currently we have two 802.1x protected SSIDs, a public and a private network: depending on an LDAP ...
0
votes
2
answers
13k
views
radclient:: Failed to find IP address
I installed freeradius on CentOS 6.6 and I have configured the files /etc/raddb/clients and /etc/raddb/users.
I am trying to test the server by this command :
radtest Aicha passme 127.0.0.1 100 ...
0
votes
1
answer
331
views
Poptop configured for freeradius but still authenticates through chap
I'm running Centos 6 64 bit with Poptop and radiusclient. When I connect to my poptop server this error comes up in the error log:
Feb 21 14:40:42 alpha pptpd[13225]: CTRL: Client **** control ...
0
votes
1
answer
360
views
freeradius broken after apt-get update
Ubuntu 14.04.1 LTS
apt-get update /upgrade was run last night at around 10pm. This morning people are saying that they can't get into ftp and wifi because these services are auth'd by freeradius.
...
0
votes
1
answer
400
views
freeradius pass current virtual server port to module
I'm trying to use rlm_python to authenticate client with my backend.
The problem is, it seems I could not use different modules for different virtual servers and it cause my authentication backed ...
-1
votes
1
answer
209
views
Prevent internet from being monopolized by one user
In our company, there is a training room which contains 15 computers. Our employees (or external individuals) can follow a training there using these computers.
However, we want to prevent the ...
1
vote
1
answer
3k
views
FreeRadius Accounting not working, bad passwords not cheked
I'm trying to configure a captive portal using a router with OpenWRT+ChilliSpot and an external server with Freeradius and a Web Server.
ChilliSpot 1.3.0
My issue right now is that the freeradius ...
2
votes
0
answers
3k
views
FreeRadius Error reading /etc/freeradius/huntgroups
I've configured freeradius to use sql, everything was working fine, I was doing some tests with the users, and suddenly I cannot start the debugger because of this error :
rlm_preprocess: Error ...
1
vote
3
answers
4k
views
Is there a way to allow all external ip connections (i.e ipv6 as well as ipv4) in FreeRadius?
I need to accept all incoming connections to the FreeRadius server be it ipv6 or ipv4.
I know that we can allow all ipv4 clients with:
client 0.0.0.0/0 {
secret = abcde
shortname = xxxx
}
How to ...
1
vote
2
answers
1k
views
Cisco Aironet AP1260 can't reach FreeRADIUS server
I have a problem with a Cisco Aironet AP1260 standalone access point and a FreeRADIUS server.
I'm trying to set up a 802.11x access point with authentication on a FreeRADIUS server.
I have set up both ...
0
votes
0
answers
385
views
EAP-TLS Passthrough from pppd to Radius?
I am setting up an IPSec+L2TP VPN for a couple of Windows boxes connecting to a Debian 7.6 (Wheezy) machine running ipsec tools and xl2tpd/pppd. Client authentication via mschapv2 works well enough; ...
4
votes
1
answer
6k
views
FreeRADIUS using Active Directory integration broken without any traces
I've a FreeBSD 10.0 server running FreeRADIUS 3 and things got broken without any apparent reason.
I'm using Winbind from Samba4 to authenticate with ntlm_auth. I've done some debug to solve the ...
1
vote
1
answer
4k
views
FreeRADIUS certificate is going to expired
Recently I've created a RADIUS server (Freeradius) that authenticate with Active Directory. I follow this link to create this server:
Now, when I see the "server.cnf" file into /etc/raddb/cert , I ...
2
votes
1
answer
5k
views
FreeRADIUS and Redis Module
I am wanting to use FreeRADIUS with REDIS for authorisation and accounting. I am running FreeRADIUS 3.0.3.
I note the rlm_rediswho module, which appears to be used for caching recent accounting ...
6
votes
2
answers
29k
views
Centos 7. Freeradius fails to start on boot due to priority
I was messing around with FreeRADIUS and MySQL (MariaDB) and it seems FreeRADIUS service can't start properly on startup. But it starts fine using root user or in debug mode (radiusd -X) and works ...
1
vote
0
answers
526
views
FreeRadius-GoogleAuthenticator-Kerberos Password Change Weirdness
We are using FreeRadius, Kerberos and Google Authenticator to implement two-factor authentication. The two factor auth works fine, both from radtest and from a Watchguard firewall. To log in, a user ...
1
vote
0
answers
3k
views
Authenticate users from Active Directory with UserPrincipalName or Mail with FreeRADIUS
According to this documentation: http://deployingradius.com/documents/configuration/active_directory.html ; FreeRADIUS can authenticate Active Directory users using Samba's ntlm_auth, and in fact it ...
0
votes
1
answer
499
views
How to chroot FreeRadius
I have set up FreeRADIUS 2.1.12 on Debian for authentication in a WPA2-Enterprise environment. Now I'd like to jail it with chroot. There is a parameter in radiusd.conf configuration file pointing to ...
-2
votes
2
answers
18k
views
Freeradius Log file Information
I have installed freeradius in Ubuntu 10 LTS and I run freeradius in debugging mode as "freeradius -X" where i see the live debugging logs. Now I want to know where these logs (accept / reject) are ...
0
votes
1
answer
677
views
How to force JSON when using FreeRADIUS REST Module
I have compiled in JSON support to FreeRADIUS 3.0.2 however I note that if I configure authorisation to use POST it is sending RADIUS attributes encoded as application/x-www-form-urlencoded
Is there ...
1
vote
1
answer
6k
views
Using python in FreeRADIUS
There seems to be documentation lacking on how to use the python module in FreeRADIUS.
I want to use python to interpret a MAC address (in %{Calling-Station-ID}) and return an IP address.
In my ...
1
vote
2
answers
1k
views
Point of Shared Secrets on RADIUS Servers over a Cisco Switch
I was wondering what the point of Shared Secrets are on RADIUS servers if I set the secret in the Cisco switch configuration. If the supplicant wanting to be authenticated does not have to know it, ...
0
votes
1
answer
796
views
FreeRADIUS Rest Module on Centos 6.x
I am attempting to add JSON support for the REST module on Centos 6.5
I have installed the json-c-devel package however when compiling FreeRADIUS it complains it can't find it:
[root@dhcp01]# ./...
1
vote
0
answers
1k
views
Can't run freeradius as a service
I have a radiusd server on a virtual machine, it's already configured and working when I issue "radiusd -X" aka debug mode. My only issue is that when I try to run it as a service it fails...
Here's ...
1
vote
1
answer
7k
views
FreeRADIUS mschap
Following this guide, I am trying to set up FreeRADIUS to authenticate against Active Directory. I can get an Access-Accept message when I send the password in plaintext (using the DEFAULT Auth-...
0
votes
1
answer
611
views
RADIUS authentication requests not relayed to RADIUS server
I am trying to set up a RADIUS server for 802.1x NAC over a Cisco IE 3000 Network Switch, using freeRadius to implement it.
I know the switch knows where the RADIUS server is because I set up the ...
0
votes
1
answer
2k
views
Configuring a RADIUS server for 802.1x over a Cisco Switch
I am trying to set up RADIUS authentication over a Cisco switch and I have gone through every tutorial they have.
I am able to get the RADIUS server to authenticate when I access the CLI of the Cisco ...
0
votes
2
answers
745
views
Syntax of mac2vlan file in freeradius?
Below is the content of mac2vlan file in freeradius.
When I uncomment this line 00:01:02:03:04:05,VLAN1 it logs a parsing error
including configuration file /etc/raddb/modules/mac2vlan
/etc/raddb/...
0
votes
1
answer
3k
views
Configuring dhcp module in FreeRadius (3.0.2 - Centos 6.5)
I am using the REST module to authorise a DHCP request. I would like to send an explicit DHCP NAK if the authorisation fails, however the DHCP module seems to return immediately if there is a failure ...
4
votes
1
answer
9k
views
Configuring rlm_rest module in FreeRadius
using FreeRADIUS I need to authenticate RADIUS users against a web backend and have been attempting to use the rlm_rest module to do it. See here.
In my site configuration I have something like this:
...
0
votes
2
answers
4k
views
RADIUS-sever: Hashing password before checking
I do have to set up a RADIUS server for authentication with a captive portal of pfSense.
Unfortunately, all passwords in the RADIUS' database are hashed with a certain algorithm. I do use a MySQL-...
2
votes
1
answer
3k
views
FreeRADIUS w/ MySQL backend. IP Pool
I have a pool of addresses (172.16.0.0/24) configured on my NAS (Cisco 2921 router) for my IPsec clients.
I have various subnet mask length subnetworks used for different user groups. For example I ...
3
votes
2
answers
3k
views
freeradius two factor without factor concatenation
I have a cisco router providing an SSL VPN server which is talking to freeradius, which in turn uses pam and two pam modules (sss & yubico) to provide two factor authentication for the VPN.
All ...
0
votes
1
answer
2k
views
FreeRADIUS clients to access service with username and password with access periods
I am using freeradius/mysql/daloradius.
I need my customers to be able to login using a username and password that they signed up with and at the same time give them different access periods.
How do ...
3
votes
2
answers
6k
views
TLS from Radius for Wifi is rejected by Win7
We do have the following Setup at our company
Synology RS812+ hosting LDAP, RADIUS, DNS (Version DSM 5.0-4458 Update 2)
2*Cisco Wifi APs WAP561 (Firmware 1.0.3.4)
Cisco Router ISA500 (Firmware 1.2.19)...
3
votes
1
answer
2k
views
FreeRadius Server: RadGroupReply attribute for maximum connected users?
I have a FreeRadius server and I'd like to set a limitation for the number of users connected to a specific NAS. My current set up is that every user that connects to a certain NAS is added to the ...
1
vote
1
answer
6k
views
FreeRadius MSCHAP Authentication With Realm Fails
I have FreeRadius 2.0 server with AD as user store. Authenticating using EAP-PEAP-MSCHAP2.Local realm is defined in proxy.conf.
Authentications works fine without realm added to the username. As soon ...
3
votes
2
answers
8k
views
Freeradius: Assign Group to User based on Nas-IP-Address
I wonder if anyone can help me.
The goal is to assign different users different ip address based on the AP they connect to. I cannot statically set this as users will travel and end up connecting ...
1
vote
1
answer
2k
views
Authentication to Squid proxy with a RADIUS-authenticated client
I want to set up a wireless environment where WPA2-Enterprise is used for authentication to a FreeRADIUS server (using EAP-TTLS or PEAP), and the wireless client is seamlessly routed through and ...
0
votes
1
answer
4k
views
Authenticate Radius user using pam and ssh [duplicate]
I am able to authenticate radius users using radius server+pam+ssh with creating local user with blank password in linux.
Is it possible to authenticate radius users without creating users in local ...
5
votes
1
answer
2k
views
Multiple Valid Certificates in Windows 7 breaking Wired 802.1x Deployment
I have a Wired 802.1x deployment using TLS machine authentication on Windows 7 (built-in 802.1x supplicant) with the necessary certs (FreeRadius v2.2.3 generated on Linux). Cisco C2960 POE switch is ...
2
votes
1
answer
2k
views
Freeradius server is not accepting accounting packets through tcpreplay
I am running a free radius server on system A. I am sending test accounting requests using radclient radclient -x systemA acct testing123 from system B. I can see that the radius server recieved these ...
2
votes
1
answer
5k
views
Write hash password to LDAP when creating a new user
I am working on a project with a central user database system. One of the requirements of the system is that there should be only one set of users for all the application.
FreeRADIUS and Samba are two ...
1
vote
1
answer
1k
views
l2tp/pptp + freeradius (accounting information only gets updated on disconnect)
I have a basic PPTP/L2TP setup that uses a remote freeradius server with mysql. Issue is that when a user gets connected to the vpn and as long as the user stays connected (could be hours), no ...
0
votes
1
answer
1k
views
Freeradius my custom module to set Framed-IP-Address
I got a complicated schema where my radius server needs to send the
Framed-IP-Address based on the results of a redis-db query so, I would
like to know if if the post-auth part of my default config ...
6
votes
1
answer
2k
views
Need help understanding PAM directives
I have the following directives in my /etc/pam.d/sshd file on a RHEL5 box and I'm a bit confused. These directives are there to make LDAP+RADIUS+OTP work. What I'm trying to do is tell pam not to ...
1
vote
3
answers
5k
views
How to limit user's access to a specific NAS?
I'm new to RADIUS and I have just set up a very basic FreeRADIUS server for 802.1x (WPA). I use EAP, MySQL as backend with daloRADIUS as webGUI (for user management, mainly).
I got two WiFi networks, ...
1
vote
0
answers
257
views
Checking Statement of Health (NAP) info on Linux using Dhcp and Radius
I have a Linux DHCP server and windows clients. I want my DHCP server to assign an IP address from a network let's say 10.6.3.0/255.255.255.128 if the client has it's firewall enabled or an IP address ...
0
votes
2
answers
5k
views
Multiple NAS-IP-Address check attributes in FreeRadius?
is it possible to have an OR statement in freeradius check attributes?
I have say 10 VPN servers that authenticate from freeradius. Most users can access all servers but I have a demo user that can ...