Questions tagged [radius]
Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.
353
questions
0
votes
0
answers
30
views
accel-ppp add Domain-Name RADIUS attribute in Access-Request packets
Anyone here has experience in accel-ppp. My goal is I want to include the Domain-Name RADIUS attribute in User-Name attribute when accel-ppp sends Access-Request packets to RADIUS server. Example, ...
0
votes
0
answers
34
views
Apache Basic authentication based on AuthUserFile is ignored, when mod_auth_radius.c is enabled
I hope you can help me with my problem.
I initially had a vhost config with Basic Authentication with "AuthUserFile" which works fine.
Now I wanted to use Radius for certain sites and ...
- 11
0
votes
0
answers
110
views
OPNsense with Radius Accounting
I've been testing OPNsense radius accounting by following this document,
https://docs.opnsense.org/manual/how-tos/accounting.html
I am able to authenticate user through the captive portal but there is ...
- 1
1
vote
1
answer
328
views
PowerShell commands to manage NPS Radius policies?
Are there PowerShell commands for managing NPS RADIUS policies?
I see commands for RADIUS clients (Get-NpsRadiusClient; etc), but nothing for the policies, I can't find a command to create the NPS ...
- 175
0
votes
0
answers
39
views
Authenticate windows 7 PCs with Radius server
I have a network of Windows 7 PCs. And I am looking for a way to authenticate these computers through a centralized credential server. AD was one of the options but I don't have license for Windows ...
0
votes
0
answers
39
views
Dynamic Client IP in freeRADIUS where client is identified by secret
I have multiple locations sending RADIUS requests to my server. These are currently configured as:
client any_client {
ipaddr = x.x.x.x
netmask = 32
secret = client_secret
shortname = ...
- 23
0
votes
0
answers
45
views
Authentication and user manager for Ubuntu
I'm a little bit confused about user management / authentication systems.
I would like to achieve the following:
Have a central database of users / organization units (like Active Directory) - ...
- 125
0
votes
0
answers
17
views
how to select the ISE proxy sequence based on an LDAP lookup?
I am currently setting up a VOIP network for my customer, which includes 802.1x and MAB authentication.
The normal auth sequence goes like this:
The switch detects a new machine with no 802.1x ...
- 101
0
votes
0
answers
209
views
Certificates issue during RADIUS authentication using NPS server with PEAP MSCHAPv2
I am using NPS as a RADIUS server to authenticate some devices using PEAP MSCHAPv2.
I have an issue during the server authentication, I am using a chain of trust certificates, with 1 server cert, 1 ...
0
votes
0
answers
40
views
Multiple authentication mechanisms on HPE switch
Question
Is there a way to configure multiple authentication mechanisms for SSH logins on an HPE switch? Either I did not find that in the manuals yet, or there is no information on that topic.
This ...
- 175
0
votes
0
answers
37
views
Radius authorized WiFi clients cannot access network
I am using Fortigate + FortiAP and a Radius (WS 2019 NPS) for authorization.
I can access the WiFi, I receive IP from dhcp (which is in the network), however I cannot go anywhere else.
I cannot even ...
- 17
0
votes
0
answers
397
views
Windows NPS Logs - How to decode the class (25) attribute?
I'm wondering if there is a specific format for the "Class" attribute in Windows NPS logs.
Specifically, I'm looking at logs from Windows Server 2019 which are under %SystemRoot%\System32\...
0
votes
0
answers
92
views
Why I am getting wrong IP address when connected to the freeradius server with VLAN attribute set
I am new to the Freeradius
I am trying to connect to the Unifi AP through freeradius authentication. I can connect to it successfully and access local services. but I am not getting the correct IP ...
0
votes
1
answer
508
views
Mikrotik Ovpn with RADIUS
I need to setup OpenVPN server on a Mikrotik router. The authentication for the clients needs to be done by a Windows RADIUS server.
My problem is that the Mikrotik uses the unencryptrd PAP protocol ...
- 66
0
votes
0
answers
24
views
Wifi connection fails until user logs in, then drops when the log out
Scenario: We have a number of PCs (50+) on a small corporate network, running Windows 10, MS server 2012 running the normal services (AD, DHCP, DNS etc) and a Ubiquity based network and wireless APs. ...
1
vote
0
answers
404
views
Bypassing Network Policy Server with Azure AD Extension
I hope someone can help guide me here!
We have a RDS environment and introduced Azure MFA and built it successfully using the following guide here: https://learn.microsoft.com/en-us/azure/active-...
- 158
0
votes
1
answer
474
views
Same FQDN for different IP depending on connection
I run a Kerberos / LDAP user authentication on Debian, which works nicely for decades. I now would like to use notebooks, which may connect by wire or by WiFi. I'm stuck thinking how to set up this ...
- 285
0
votes
2
answers
120
views
How to show an internal static page to IP addresses list? [closed]
I have a ubuntu 22.04 server, a list of ip addresses of users on my local network and I want to redirect http/https traffic from this list to a local informative html page. Similar to how a hotspot ...
- 376
-1
votes
2
answers
295
views
SSL certificate
I have root and intermediate certificate, and I need to create the certificate which I need to install on RADIUS server. However, I don't have clear idea in my head about this. Here are my questions:
...
- 99
1
vote
0
answers
307
views
Any way to do virtual 802.1x inside Linux?
I'm trying to test out 802.1x in a virtual environment but I haven't been able to find any good resources/guides on how to do that.
The scenario is something like this:
I have a Linux host machine (...
- 478
0
votes
0
answers
44
views
Hostapd RADIUS Attributes - FramedIP
So I recently started playing with Hostapd and I finally got 802.1x working.
The issue is, I have an authenticating proxy server where I'm sending my RADIUS Acct and while it's logging the ...
- 1
0
votes
0
answers
70
views
How to assign user role when authenticating Cisco switch with Radius server and LDAP?
I'm setting the Radius server to remote login by LDAP user. I use freeRadius.
The problem is default user role is network-operator. I want to know how to upgrade user role to network-admin. I've ...
- 1
0
votes
1
answer
473
views
pam radius bypass same local user (exception user)
Pam Radius login works with the following configuration.
However, it would be necessary for some users to perform local authentication. How can I solve this?
[xxxxxxxxxxx ~]# cat /etc/pam.d/sshd
#%PAM-...
- 1
2
votes
0
answers
22
views
NPS policy for external firm?
Can NPS be used in the following scenario:
We (FIRM-A) are sharing some office space with another firm (FIRM-B). We would like their laptops to connect to our "Internet Only" SSID. Those ...
0
votes
0
answers
1k
views
Windows NPS refusing all network policies or ignoring correct credentials
I have a AD-joined Windows Server 2019 Standard with NPS installed and AD connected.
When I try to RADIUS authenticate it always fails and this is unfixable so far.
The RADIUS Clients are configured ...
- 123
0
votes
1
answer
3k
views
Daloradius ERROR: (3) sql: ERROR: rlm_sql_mysql: ERROR 1054 (Unknown column 'acctupdatetime' in 'field list')
Getting the following error after configuring freeradius with daloradius.
ERROR: (3) sql: ERROR: rlm_sql_mysql: ERROR 1054 (Unknown column 'acctupdatetime' in 'field list')
Radius server accounting ...
- 121
0
votes
1
answer
1k
views
FreeRADIUS accept any password for one user only
I need to configure one user on FreeRADIUS to authenticate and generate an access-accept regardless of the password submitted by the user. I can see how to do this for all users, but how can I do this ...
- 277
1
vote
1
answer
4k
views
Laptop asking for "action needed" on NPS Computer auth WiFi connect, despite valid Server Thumbprint
I have configured computer authentication on WiFi connect to company network, using the microsoft nps server, group policy certificate auto-enrollment and group-policy wifi config.
Has been working ...
- 1,154
0
votes
0
answers
333
views
CentOS 7 , OpenVPN Server Radius Plugin
On my new openvpn server install
radius plugin can not read client status.
It worked on previous installation, now all things are the same, but not working.
OpenVPN Server Conf:
port 57192
proto udp
...
1
vote
0
answers
2k
views
802.1x NPS Machine authentication
We are trying to implement 802.1x to authenticate wirelless users (Aruba Controller) through RADIUS (Windows server 2019 NPS),
For mobile phones and guests devices, we have successfully configured the ...
0
votes
1
answer
903
views
NPS Radius Configuration EAP-Ms-Chapv2
I'm tryng to fix my Microsoft Server 2016 Network Policy Server configuration as radius server, with PEAP-MSChapv2.
As well known some modern devices are not able to "not validate" server ...
- 11
1
vote
0
answers
50
views
How to connect device with no web browser to RADIUS WPA2 Enterprise wifi network
I am trying to connect a Bresser 5-in-1 Weather Station to a workplace's wifi network, which uses RADIUS WPA2 Enterprise security. From a laptop or smartphone I can connect to the network and then ...
- 440
0
votes
2
answers
1k
views
Can radius be configured to assign ip addresses?
I would need to know if a radius server can be configured in such a way that it allows to assign a specific ip address to a device when it connects.
I mean, when a mobile device connects to the wifi ...
- 129
1
vote
0
answers
382
views
Disassociated WLAN (Disassociated due to inactivity)
I am reading the logs provided by an access point I have broadcasting an 802.11i (WPA) LAN network running with a radius authentication method, and the log returns the following two messages:
Aug 31 ...
- 129
0
votes
0
answers
308
views
Logging all SSH commands from a linux Jumpbox
I'm tasked with coming up with a solution for our NOC to implement MFA\secured access on our routers. There are caveats to doing this as TACACS\RADIUS is only supported on the MGMT interface amongst ...
1
vote
0
answers
232
views
Freeradius doesn't start when CoS user attributes are configured
I have a problem with a POC, I tried use Freeradius for authentication purpose and assign attributes for users of a broadband network (PPPoE). When I configure the user with this parameters I can ...
- 11
2
votes
0
answers
805
views
Fortigate and RADIUS Wifi authentication for domain and non-domain devices
We're setting up RADIUS authentication for wireless network connections through a Windows Server 2012 R2 (NPS).
We have to allow both domain computers (registered in Active directory) and non-domain ...
- 75
0
votes
1
answer
509
views
On Premise NPS server check computer account in Azure AD
I've got a Windows based NPS Radius server for authenticating my wireless clients based on device certificates (supplied by my internal CA). In my NPS network policy I have set conditions to grant ...
1
vote
0
answers
303
views
FreeRADIUS cannot bind to FreeIPA
I have installed FreeRADIUS and FreeIPA on the same machine running Fedora 33. IPA is working as expected and can have clients join and authenticate. LDAP command line tools (ldapsearch, ldapmodify) ...
- 11
0
votes
1
answer
780
views
OPNSense and Unifi RADIUS issue
I have an OPNSense firewall and a Unifi controller I am trying to enable Radius authentication and Radius Vlan assignment
On the unifi side I have done the following
Created an SSID
Created A radius ...
- 101
1
vote
1
answer
57
views
Strongswan central authentication for already exisint users in database
I have read a lot about authenticating Strongswan to SQL/PAM but can't find any idea/solution how to authenticate against a database where already there are a plenty of username and password ...
- 13
0
votes
0
answers
625
views
Client hostname attribute in radius request
I am now trying to run logging of accounting information into my database. I use FreeRadius. I have read at glance a few RFC for radius accounting and authentication, so I expect that it is not ...
- 39
0
votes
1
answer
2k
views
keepalived - "notifiy_master"/ "notify_backup" does not start/stop application
I want to start/stop a freeradius depending on the master (start) or the backup (stop) state of the keepalived instance. The freeradius is listening for accounting messages on the shared virtual ip.
I ...
- 1
0
votes
1
answer
1k
views
Failed To Authenticate To NPS Server
I am running an NPS Server on my Windows Server 2019 of my network. I use it to authenticate into my Cisco C9300 switches as an administrator to work on them. Recently I am unable to login as it says ...
- 825
0
votes
2
answers
806
views
Radius Authentication error between Active Directory NPS - Aruba 2930f
I am trying to configure Radius authentification using NPS backend. I have configured both ends but it does not seem to work.I am not sure if this is even correct. Kindly help.
NPS Config:
I have ...
- 101
1
vote
0
answers
361
views
Apache2: RADIUS authentication before rewrite engine HTTPS
I tried to set up a reverse proxy with HTTPS and Radius authentication. Unfortunately, I don't get an authentication query before it redirects to the HTTPS page. What did I do wrong?
<VirtualHost *:...
- 11
3
votes
2
answers
3k
views
EAP / MSCHAPv2 authentications fails (only) on Windows with custom authenticator
I have a project that involves custom client authentication for the StrongSwan IKEv2 server implementation on Linux.
I am running: StrongSwan 5.4.0 with eap-radius plugin
Currently, we use FreeRadius ...
- 31
2
votes
0
answers
379
views
OpenVPN auth with Freeradius fails with error message: Module is unknown
I have installed an OpenVPN server with Easy-RSA. I generated the certificate and signed it on my CA Server and copied it back to VPN server. I can establish the client-server connection via ...
- 1,565
1
vote
1
answer
1k
views
FreeRadius doesn't log request in Debug mode
Sorry, Radius newbie here …
I try to get a FreeRadius server version 3.0.20 as packaged by NixOS running to authenticate users on a dlink access point. I'm running the server with debug logging ...
- 138
1
vote
1
answer
172
views
802.1X Chicken or the Egg?
I'm reading about 802.1X and WPA-2 Enterprise and how to set up it. I've read briefly about the different EAPs and understand that EAP-TLS is the better method of authentication due to the use of ...
