Questions tagged [radius]

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

Filter by
Sorted by
Tagged with
0 votes
0 answers
86 views

troubleshooting radius auth with okta and AD

I am running Amazon Workspaces, and wish to use RADIUS based MFA for login. MFA would be provided by Okta. I have an AWS Managed AD with AD Connector connected to it. (I assume this is redundant, but ...
Geremy's user avatar
  • 103
0 votes
0 answers
31 views

How to make FreeRadius identify RADIUS Clients by MAC/Shortname instead of IP?

I use FreeRadius with Postgres SQL. Is there a way to validate clients (i.e. routers, specifically Mikrotik ones) that uses anything else from Client IP? The reason why I need that is that clients can ...
Георгий Садовой's user avatar
0 votes
2 answers
101 views

Freeradius filter ldap by group

I would like freeradius to check for group membership and allow access based on group membership: My current config: ldap { identity = 'cn=radius,ou=bindings,dc=company,dc=com' ...
Kristof Rado's user avatar
1 vote
0 answers
110 views

Configure number of RADIUS retransmits or timeout for Strongswan eap-radius

I have the following connection scheme: Site A (radius server) <--> Site B (gateway) <--> Roadwarrior (Bob) Site B uses eap-radius plugin for RADIUS Authentication and Accounting. ...
Ilya Cherevkov's user avatar
0 votes
0 answers
39 views

Forcing freeradius to use 802.1x-2010

I am trying to troubleshoot a remote problem, where a piece of hardware is unable to connect using enterprise WPA. From the remote logs, it seems that the network is using 802.1X-2010, while the ...
mgs's user avatar
  • 1
0 votes
1 answer
137 views

Experiment with DNS server resolution DENY policies doesn't work as expected [closed]

I am experimenting with DNS server resolution DENY policies, and it doesn't work as expected. Here is the general idea: A test non-domain member with no special settings Windows PC with no special ...
wrieedx's user avatar
  • 768
0 votes
0 answers
62 views

accel-ppp add Domain-Name RADIUS attribute in Access-Request packets

Anyone here has experience in accel-ppp. My goal is I want to include the Domain-Name RADIUS attribute in User-Name attribute when accel-ppp sends Access-Request packets to RADIUS server. Example, ...
kramnitsuj's user avatar
0 votes
0 answers
92 views

Apache Basic authentication based on AuthUserFile is ignored, when mod_auth_radius.c is enabled

I hope you can help me with my problem. I initially had a vhost config with Basic Authentication with "AuthUserFile" which works fine. Now I wanted to use Radius for certain sites and ...
matrix154's user avatar
0 votes
0 answers
310 views

OPNsense with Radius Accounting

I've been testing OPNsense radius accounting by following this document, https://docs.opnsense.org/manual/how-tos/accounting.html I am able to authenticate user through the captive portal but there is ...
Mindf's user avatar
  • 1
1 vote
1 answer
2k views

PowerShell commands to manage NPS Radius policies?

Are there PowerShell commands for managing NPS RADIUS policies? I see commands for RADIUS clients (Get-NpsRadiusClient; etc), but nothing for the policies, I can't find a command to create the NPS ...
user3271408's user avatar
0 votes
0 answers
106 views

Authenticate windows 7 PCs with Radius server

I have a network of Windows 7 PCs. And I am looking for a way to authenticate these computers through a centralized credential server. AD was one of the options but I don't have license for Windows ...
Canonical's user avatar
0 votes
0 answers
98 views

Dynamic Client IP in freeRADIUS where client is identified by secret

I have multiple locations sending RADIUS requests to my server. These are currently configured as: client any_client { ipaddr = x.x.x.x netmask = 32 secret = client_secret shortname = ...
Damian Games's user avatar
0 votes
0 answers
43 views

how to select the ISE proxy sequence based on an LDAP lookup?

I am currently setting up a VOIP network for my customer, which includes 802.1x and MAB authentication. The normal auth sequence goes like this: The switch detects a new machine with no 802.1x ...
Adalcar's user avatar
  • 101
0 votes
0 answers
327 views

Certificates issue during RADIUS authentication using NPS server with PEAP MSCHAPv2

I am using NPS as a RADIUS server to authenticate some devices using PEAP MSCHAPv2. I have an issue during the server authentication, I am using a chain of trust certificates, with 1 server cert, 1 ...
Alexandre Rey's user avatar
0 votes
0 answers
82 views

Multiple authentication mechanisms on HPE switch

Question Is there a way to configure multiple authentication mechanisms for SSH logins on an HPE switch? Either I did not find that in the manuals yet, or there is no information on that topic. This ...
TomS's user avatar
  • 185
0 votes
0 answers
76 views

Radius authorized WiFi clients cannot access network

I am using Fortigate + FortiAP and a Radius (WS 2019 NPS) for authorization. I can access the WiFi, I receive IP from dhcp (which is in the network), however I cannot go anywhere else. I cannot even ...
Artur's user avatar
  • 7
0 votes
0 answers
1k views

Windows NPS Logs - How to decode the class (25) attribute?

I'm wondering if there is a specific format for the "Class" attribute in Windows NPS logs. Specifically, I'm looking at logs from Windows Server 2019 which are under %SystemRoot%\System32\...
Duck of Death's user avatar
0 votes
1 answer
919 views

Mikrotik Ovpn with RADIUS

I need to setup OpenVPN server on a Mikrotik router. The authentication for the clients needs to be done by a Windows RADIUS server. My problem is that the Mikrotik uses the unencryptrd PAP protocol ...
Smoke's user avatar
  • 76
1 vote
0 answers
626 views

Bypassing Network Policy Server with Azure AD Extension

I hope someone can help guide me here! We have a RDS environment and introduced Azure MFA and built it successfully using the following guide here: https://learn.microsoft.com/en-us/azure/active-...
cOzMaTiC's user avatar
  • 158
0 votes
1 answer
851 views

Same FQDN for different IP depending on connection

I run a Kerberos / LDAP user authentication on Debian, which works nicely for decades. I now would like to use notebooks, which may connect by wire or by WiFi. I'm stuck thinking how to set up this ...
Lars Hanke's user avatar
0 votes
2 answers
131 views

How to show an internal static page to IP addresses list? [closed]

I have a ubuntu 22.04 server, a list of ip addresses of users on my local network and I want to redirect http/https traffic from this list to a local informative html page. Similar to how a hotspot ...
acgbox's user avatar
  • 398
-1 votes
2 answers
398 views

SSL certificate

I have root and intermediate certificate, and I need to create the certificate which I need to install on RADIUS server. However, I don't have clear idea in my head about this. Here are my questions: ...
Quirik's user avatar
  • 99
1 vote
0 answers
448 views

Any way to do virtual 802.1x inside Linux?

I'm trying to test out 802.1x in a virtual environment but I haven't been able to find any good resources/guides on how to do that. The scenario is something like this: I have a Linux host machine (...
A. Trevelyan's user avatar
0 votes
1 answer
596 views

pam radius bypass same local user (exception user)

Pam Radius login works with the following configuration. However, it would be necessary for some users to perform local authentication. How can I solve this? [xxxxxxxxxxx ~]# cat /etc/pam.d/sshd #%PAM-...
dilen7's user avatar
  • 1
2 votes
0 answers
22 views

NPS policy for external firm?

Can NPS be used in the following scenario: We (FIRM-A) are sharing some office space with another firm (FIRM-B). We would like their laptops to connect to our "Internet Only" SSID. Those ...
Steve Tremblay's user avatar
0 votes
0 answers
2k views

Windows NPS refusing all network policies or ignoring correct credentials

I have a AD-joined Windows Server 2019 Standard with NPS installed and AD connected. When I try to RADIUS authenticate it always fails and this is unfixable so far. The RADIUS Clients are configured ...
Philipp's user avatar
  • 123
0 votes
1 answer
4k views

Daloradius ERROR: (3) sql: ERROR: rlm_sql_mysql: ERROR 1054 (Unknown column 'acctupdatetime' in 'field list')

Getting the following error after configuring freeradius with daloradius. ERROR: (3) sql: ERROR: rlm_sql_mysql: ERROR 1054 (Unknown column 'acctupdatetime' in 'field list') Radius server accounting ...
xaander1's user avatar
  • 141
0 votes
1 answer
2k views

FreeRADIUS accept any password for one user only

I need to configure one user on FreeRADIUS to authenticate and generate an access-accept regardless of the password submitted by the user. I can see how to do this for all users, but how can I do this ...
btongeorge's user avatar
2 votes
1 answer
5k views

Laptop asking for "action needed" on NPS Computer auth WiFi connect, despite valid Server Thumbprint

I have configured computer authentication on WiFi connect to company network, using the microsoft nps server, group policy certificate auto-enrollment and group-policy wifi config. Has been working ...
Jasper's user avatar
  • 1,214
0 votes
0 answers
403 views

CentOS 7 , OpenVPN Server Radius Plugin

On my new openvpn server install radius plugin can not read client status. It worked on previous installation, now all things are the same, but not working. OpenVPN Server Conf: port 57192 proto udp ...
Pedram Masoumi's user avatar
1 vote
0 answers
2k views

802.1x NPS Machine authentication

We are trying to implement 802.1x to authenticate wirelless users (Aruba Controller) through RADIUS (Windows server 2019 NPS), For mobile phones and guests devices, we have successfully configured the ...
Oualid ZAKOUR's user avatar
0 votes
1 answer
1k views

NPS Radius Configuration EAP-Ms-Chapv2

I'm tryng to fix my Microsoft Server 2016 Network Policy Server configuration as radius server, with PEAP-MSChapv2. As well known some modern devices are not able to "not validate" server ...
mnet's user avatar
  • 11
1 vote
0 answers
60 views

How to connect device with no web browser to RADIUS WPA2 Enterprise wifi network

I am trying to connect a Bresser 5-in-1 Weather Station to a workplace's wifi network, which uses RADIUS WPA2 Enterprise security. From a laptop or smartphone I can connect to the network and then ...
CesarGon's user avatar
  • 470
0 votes
2 answers
1k views

Can radius be configured to assign ip addresses?

I would need to know if a radius server can be configured in such a way that it allows to assign a specific ip address to a device when it connects. I mean, when a mobile device connects to the wifi ...
user3105's user avatar
  • 129
1 vote
0 answers
419 views

Disassociated WLAN (Disassociated due to inactivity)

I am reading the logs provided by an access point I have broadcasting an 802.11i (WPA) LAN network running with a radius authentication method, and the log returns the following two messages: Aug 31 ...
user3105's user avatar
  • 129
0 votes
0 answers
385 views

Logging all SSH commands from a linux Jumpbox

I'm tasked with coming up with a solution for our NOC to implement MFA\secured access on our routers. There are caveats to doing this as TACACS\RADIUS is only supported on the MGMT interface amongst ...
NOC_Ninja982134's user avatar
1 vote
0 answers
280 views

Freeradius doesn't start when CoS user attributes are configured

I have a problem with a POC, I tried use Freeradius for authentication purpose and assign attributes for users of a broadband network (PPPoE). When I configure the user with this parameters I can ...
Pablo Xavier's user avatar
2 votes
0 answers
960 views

Fortigate and RADIUS Wifi authentication for domain and non-domain devices

We're setting up RADIUS authentication for wireless network connections through a Windows Server 2012 R2 (NPS). We have to allow both domain computers (registered in Active directory) and non-domain ...
wiltomap's user avatar
0 votes
1 answer
688 views

On Premise NPS server check computer account in Azure AD

I've got a Windows based NPS Radius server for authenticating my wireless clients based on device certificates (supplied by my internal CA). In my NPS network policy I have set conditions to grant ...
Martijn Balink's user avatar
1 vote
0 answers
344 views

FreeRADIUS cannot bind to FreeIPA

I have installed FreeRADIUS and FreeIPA on the same machine running Fedora 33. IPA is working as expected and can have clients join and authenticate. LDAP command line tools (ldapsearch, ldapmodify) ...
Pontus's user avatar
  • 11
0 votes
1 answer
906 views

OPNSense and Unifi RADIUS issue

I have an OPNSense firewall and a Unifi controller I am trying to enable Radius authentication and Radius Vlan assignment On the unifi side I have done the following Created an SSID Created A radius ...
Kyle Sponable's user avatar
1 vote
1 answer
65 views

Strongswan central authentication for already exisint users in database

I have read a lot about authenticating Strongswan to SQL/PAM but can't find any idea/solution how to authenticate against a database where already there are a plenty of username and password ...
csib's user avatar
  • 13
0 votes
0 answers
802 views

Client hostname attribute in radius request

I am now trying to run logging of accounting information into my database. I use FreeRadius. I have read at glance a few RFC for radius accounting and authentication, so I expect that it is not ...
Jiří Juřica's user avatar
0 votes
1 answer
2k views

keepalived - "notifiy_master"/ "notify_backup" does not start/stop application

I want to start/stop a freeradius depending on the master (start) or the backup (stop) state of the keepalived instance. The freeradius is listening for accounting messages on the shared virtual ip. I ...
ryudo's user avatar
  • 1
0 votes
1 answer
2k views

Failed To Authenticate To NPS Server

I am running an NPS Server on my Windows Server 2019 of my network. I use it to authenticate into my Cisco C9300 switches as an administrator to work on them. Recently I am unable to login as it says ...
JukEboX's user avatar
  • 835
0 votes
2 answers
951 views

Radius Authentication error between Active Directory NPS - Aruba 2930f

I am trying to configure Radius authentification using NPS backend. I have configured both ends but it does not seem to work.I am not sure if this is even correct. Kindly help. NPS Config: I have ...
Shruthi's user avatar
  • 101
1 vote
0 answers
404 views

Apache2: RADIUS authentication before rewrite engine HTTPS

I tried to set up a reverse proxy with HTTPS and Radius authentication. Unfortunately, I don't get an authentication query before it redirects to the HTTPS page. What did I do wrong? <VirtualHost *:...
Robin Schulz's user avatar
3 votes
2 answers
4k views

EAP / MSCHAPv2 authentications fails (only) on Windows with custom authenticator

I have a project that involves custom client authentication for the StrongSwan IKEv2 server implementation on Linux. I am running: StrongSwan 5.4.0 with eap-radius plugin Currently, we use FreeRadius ...
Domokun's user avatar
  • 31
2 votes
0 answers
421 views

OpenVPN auth with Freeradius fails with error message: Module is unknown

I have installed an OpenVPN server with Easy-RSA. I generated the certificate and signed it on my CA Server and copied it back to VPN server. I can establish the client-server connection via ...
Houman's user avatar
  • 1,675
1 vote
1 answer
1k views

FreeRadius doesn't log request in Debug mode

Sorry, Radius newbie here … I try to get a FreeRadius server version 3.0.20 as packaged by NixOS running to authenticate users on a dlink access point. I'm running the server with debug logging ...
Matthias Wimmer's user avatar

1
2 3 4 5
8