Questions tagged [radius]

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

Filter by
Sorted by
Tagged with
2 votes
0 answers
11 views

NPS policy for external firm?

Can NPS be used in the following scenario: We (FIRM-A) are sharing some office space with another firm (FIRM-B). We would like their laptops to connect to our "Internet Only" SSID. Those ...
user avatar
0 votes
0 answers
29 views

RADIUS NPS Proxy certificate based authentication

Is it possible to configure an NPS RADIUS proxy to accept/forward computer certificates as authentication/call station ID? Previous setup was to push network profile through GPO to use computer ...
user avatar
0 votes
0 answers
168 views

Windows NPS refusing all network policies or ignoring correct credentials

I have a AD-joined Windows Server 2019 Standard with NPS installed and AD connected. When I try to RADIUS authenticate it always fails and this is unfixable so far. The RADIUS Clients are configured ...
user avatar
  • 93
0 votes
1 answer
534 views

Daloradius ERROR: (3) sql: ERROR: rlm_sql_mysql: ERROR 1054 (Unknown column 'acctupdatetime' in 'field list')

Getting the following error after configuring freeradius with daloradius. ERROR: (3) sql: ERROR: rlm_sql_mysql: ERROR 1054 (Unknown column 'acctupdatetime' in 'field list') Radius server accounting ...
user avatar
  • 121
0 votes
1 answer
125 views

FreeRADIUS accept any password for one user only

I need to configure one user on FreeRADIUS to authenticate and generate an access-accept regardless of the password submitted by the user. I can see how to do this for all users, but how can I do this ...
user avatar
0 votes
0 answers
24 views

Network Policy Server policies for different Active Directory Groups

I am trying to configure a Network Policy for our OpenVPN server to authenticate using our Radius servers. Our radius servers currently have a bunch of radius clients configured, we use them for ...
user avatar
0 votes
1 answer
418 views

Laptop asking for "action needed" on NPS Computer auth WiFi connect, despite valid Server Thumbprint

I have configured computer authentication on WiFi connect to company network, using the microsoft nps server, group policy certificate auto-enrollment and group-policy wifi config. Has been working ...
user avatar
  • 964
0 votes
0 answers
59 views

accounting Squid clients using freeradius

sorry I'm a very newbie in freeradius, and I try to create a VPN server using squid and check user sessions using freeradius. everything is ok, except the accounting and checking the sessions. my goal ...
user avatar
  • 101
0 votes
0 answers
25 views

I want to know how to change ip from expire pool to normal after date is extended

I been searching for a solution regarding freeradius revert from expired pool to normal pool when the user paid. I just entered a date and time for a particular user for expiry in mysql. MYSQL ...
user avatar
  • 1
0 votes
0 answers
93 views

CentOS 7 , OpenVPN Server Radius Plugin

On my new openvpn server install radius plugin can not read client status. It worked on previous installation, now all things are the same, but not working. OpenVPN Server Conf: port 57192 proto udp ...
user avatar
1 vote
0 answers
484 views

802.1x NPS Machine authentication

We are trying to implement 802.1x to authenticate wirelless users (Aruba Controller) through RADIUS (Windows server 2019 NPS), For mobile phones and guests devices, we have successfully configured the ...
user avatar
0 votes
0 answers
88 views

Freeradius 3.0 accept all IP Address

I found the following code on the internet to allow all IP in freeradius client.conf file, client 0.0.0.0/0 { secret = 12345 shortname = name } But This is not working in freeradius 3.0 , it is ...
user avatar
0 votes
1 answer
364 views

NPS Radius Configuration EAP-Ms-Chapv2

I'm tryng to fix my Microsoft Server 2016 Network Policy Server configuration as radius server, with PEAP-MSChapv2. As well known some modern devices are not able to "not validate" server ...
user avatar
  • 1
0 votes
0 answers
113 views

pfSense RADIUS challenge

I'm trying to configure my pfSense box (running 2.5.2-RELEASE) to use my RADIUS server for admin login authentication. My RADIUS server challenges for a TOTP code after getting the correct password, ...
user avatar
1 vote
0 answers
31 views

How to connect device with no web browser to RADIUS WPA2 Enterprise wifi network

I am trying to connect a Bresser 5-in-1 Weather Station to a workplace's wifi network, which uses RADIUS WPA2 Enterprise security. From a laptop or smartphone I can connect to the network and then ...
user avatar
  • 430
0 votes
2 answers
328 views

Can radius be configured to assign ip addresses?

I would need to know if a radius server can be configured in such a way that it allows to assign a specific ip address to a device when it connects. I mean, when a mobile device connects to the wifi ...
user avatar
1 vote
0 answers
97 views

Disassociated WLAN (Disassociated due to inactivity)

I am reading the logs provided by an access point I have broadcasting an 802.11i (WPA) LAN network running with a radius authentication method, and the log returns the following two messages: Aug 31 ...
user avatar
0 votes
0 answers
206 views

FreeRADIUS - How to RADIUS Proxy based on source IP?

I am currently working on building a RADIUS Proxy solution with RHEL and FreeRADIUS. As I am expecting to integrate the solution with hundreds of RADIUS Clients and RADIUS Servers, the realm proxy ...
user avatar
0 votes
0 answers
67 views

Logging all SSH commands from a linux Jumpbox

I'm tasked with coming up with a solution for our NOC to implement MFA\secured access on our routers. There are caveats to doing this as TACACS\RADIUS is only supported on the MGMT interface amongst ...
user avatar
1 vote
0 answers
116 views

Freeradius doesn't start when CoS user attributes are configured

I have a problem with a POC, I tried use Freeradius for authentication purpose and assign attributes for users of a broadband network (PPPoE). When I configure the user with this parameters I can ...
user avatar
2 votes
0 answers
276 views

Fortigate and RADIUS Wifi authentication for domain and non-domain devices

We're setting up RADIUS authentication for wireless network connections through a Windows Server 2012 R2 (NPS). We have to allow both domain computers (registered in Active directory) and non-domain ...
user avatar
0 votes
1 answer
238 views

On Premise NPS server check computer account in Azure AD

I've got a Windows based NPS Radius server for authenticating my wireless clients based on device certificates (supplied by my internal CA). In my NPS network policy I have set conditions to grant ...
user avatar
1 vote
0 answers
164 views

FreeRADIUS cannot bind to FreeIPA

I have installed FreeRADIUS and FreeIPA on the same machine running Fedora 33. IPA is working as expected and can have clients join and authenticate. LDAP command line tools (ldapsearch, ldapmodify) ...
user avatar
  • 11
0 votes
1 answer
384 views

OPNSense and Unifi RADIUS issue

I have an OPNSense firewall and a Unifi controller I am trying to enable Radius authentication and Radius Vlan assignment On the unifi side I have done the following Created an SSID Created A radius ...
user avatar
1 vote
1 answer
30 views

Strongswan central authentication for already exisint users in database

I have read a lot about authenticating Strongswan to SQL/PAM but can't find any idea/solution how to authenticate against a database where already there are a plenty of username and password ...
user avatar
  • 13
0 votes
0 answers
252 views

Client hostname attribute in radius request

I am now trying to run logging of accounting information into my database. I use FreeRadius. I have read at glance a few RFC for radius accounting and authentication, so I expect that it is not ...
user avatar
0 votes
1 answer
771 views

keepalived - "notifiy_master"/ "notify_backup" does not start/stop application

I want to start/stop a freeradius depending on the master (start) or the backup (stop) state of the keepalived instance. The freeradius is listening for accounting messages on the shared virtual ip. I ...
user avatar
  • 1
0 votes
1 answer
735 views

Failed To Authenticate To NPS Server

I am running an NPS Server on my Windows Server 2019 of my network. I use it to authenticate into my Cisco C9300 switches as an administrator to work on them. Recently I am unable to login as it says ...
user avatar
  • 761
0 votes
2 answers
538 views

Radius Authentication error between Active Directory NPS - Aruba 2930f

I am trying to configure Radius authentification using NPS backend. I have configured both ends but it does not seem to work.I am not sure if this is even correct. Kindly help. NPS Config: I have ...
user avatar
  • 101
1 vote
0 answers
139 views

Apache2: RADIUS authentication before rewrite engine HTTPS

I tried to set up a reverse proxy with HTTPS and Radius authentication. Unfortunately, I don't get an authentication query before it redirects to the HTTPS page. What did I do wrong? <VirtualHost *:...
user avatar
3 votes
2 answers
2k views

EAP / MSCHAPv2 authentications fails (only) on Windows with custom authenticator

I have a project that involves custom client authentication for the StrongSwan IKEv2 server implementation on Linux. I am running: StrongSwan 5.4.0 with eap-radius plugin Currently, we use FreeRadius ...
user avatar
  • 31
2 votes
0 answers
296 views

OpenVPN auth with Freeradius fails with error message: Module is unknown

I have installed an OpenVPN server with Easy-RSA. I generated the certificate and signed it on my CA Server and copied it back to VPN server. I can establish the client-server connection via ...
user avatar
  • 1,263
1 vote
1 answer
725 views

FreeRadius doesn't log request in Debug mode

Sorry, Radius newbie here … I try to get a FreeRadius server version 3.0.20 as packaged by NixOS running to authenticate users on a dlink access point. I'm running the server with debug logging ...
user avatar
1 vote
1 answer
107 views

802.1X Chicken or the Egg?

I'm reading about 802.1X and WPA-2 Enterprise and how to set up it. I've read briefly about the different EAPs and understand that EAP-TLS is the better method of authentication due to the use of ...
user avatar
1 vote
0 answers
815 views

How can I authenticate with both Synology OpenVPN + Radius Plugin?

I would like to have a double authentication: Certificate based authentication in OpenVPN as well as User/Password authentication via the Radius-Plugin provided on the server (Synology NAS DS2016play ...
user avatar
0 votes
0 answers
204 views

freeradius and configure eap or pap with rest

free radius and configure eap or pap with rest i want use strongswan with free radius and rest module, i see sql and eap work together, how can configure eap with rest ? the important part is ...
user avatar
0 votes
0 answers
262 views

how conncet ibsng as redius server to strongswan

I want to use ibsng (on centos 6) as a Radius server and manage my strongswan accounts (on centos 7). https://wiki.strongswan.org/projects/strongswan/wiki/EapRadius I made these settings and set up ...
user avatar
0 votes
1 answer
748 views

VPN Connection: It connects but no access to remote network resources and shows as Private rather than Domain

I have a puzzling issue that I cannot find an answer for. I'm trying to connect a Win 10 (1909) machine to a VPN running on SBS 2011, via a RADIUS server. The client connects OK, apart from I don't ...
user avatar
0 votes
1 answer
14k views

Vlan manager does not automatically disable macs

I want to implement a client infrastructure where the devices connect to the network in different vlan. I installed a freeradius server connected to our Active Directory. I have enabled the switches ...
user avatar
  • 1
0 votes
1 answer
2k views

How to configure FreeRADIUS with EAP-TLS and group-based authorization?

I configured FreeRADIUS to use EAP-TLS for certificate based authentication (self-signed certificates). Authentication works fine, except that I'd like to add group-based authorization. More ...
user avatar
0 votes
1 answer
796 views

How to configure FreeRADIUS for use with strongSwan group selection?

Building a VPN service with strongSwan, I need to distinguish between several groups of users where each group is assigned a certain subnet with certain permissions (i.e. "group x" has access only to ...
user avatar
0 votes
0 answers
269 views

Can NPS, RADIUS, and 802.1x Assign Multiple VLANs To A Single User?

I will be using Network Policy Server (NPS) with a RADIUS server to assign each user to a VLAN when they successfully authenticate to the network using 802.1x. In Active Directory Directory Services (...
user avatar
0 votes
1 answer
163 views

Requesting access to a Radius server after having requested a previous (succeful) access to another Radius server

I don't know if this idea is non-sense but I was wondering if it was possible. I have a FreeRadius server backed by a LDAP server with uses EAP-TTLS (that is, username+password) to authenticate. So ...
user avatar
  • 135
0 votes
1 answer
2k views

Freeradius 3.0.12 doesn't send any data through mysql

After upgrading from v 2.x, freeradius stopped working for me. I have done multiple tshooting steps which led me to believe that the application is not sending any data through MySQL, even though it ...
user avatar
  • 1
0 votes
1 answer
18 views

Different SSLSocket with Radius Server

I want to make a server and client application. All clients connect to the server via wifi. I want to protect the network with SSL Certificate. I found 2 alternatives: By using SSLSocket (javax.net....
user avatar
  • 3
0 votes
1 answer
196 views

FreeRADIUS - Use different pipeline for different clients

I currently have a FreeRADIUS setup using EAP-TTLS. I'd like to set it up such that requests coming from localhost use PAP, but that other requests still use EAP-TTLS. How do I select authentication ...
user avatar
2 votes
0 answers
564 views

pfSense: config with daloRadius (freeRadius) to setup download quota limitation

I have pfsense and daloRadius(running freeRadius inside) up and running, I successfully configured radius parameters on pfSense and the NAS on daloRadius and they can talk to each other. I am able to ...
user avatar
  • 171
1 vote
1 answer
629 views

How do I get a Linux box to use RADIUS authentication with a certificate?

Googling anything involving RADIUS configuration has been hell, as many of the terms get mixed together, making search results useless, so... I have a RADIUS server offering EAP-TTLS based ...
user avatar
1 vote
1 answer
687 views

Behaviour of authentication when using multiple Radius servers on RRAS

I've tried looking this up for hours but my google-fu is failing me it seems. The question is rather simple, if I configure multiple Radius servers in RRAS, if they're all ballanced equally, how are ...
user avatar
0 votes
1 answer
1k views

Why is radtest not working, and returning an error about radclient?

I've installed Free Radius following these steps: sudo apt install freeradius freeradius-config sudo sed -i '1s/^/steve Cleartext-Password := "testing"\n/' /etc/freeradius/3.0/users sudo systemctl ...
user avatar

1
2 3 4 5
7