Questions tagged [radius]
Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.
359
questions
4
votes
3
answers
1k
views
SuperMicro IPMI using Windows-based RADIUS (NPS)
I'm struggling to use a Windows-based RADIUS setup (Network Policy Server) with SuperMicro IPMI interfaces.
I've found that I need to add vendor-specific attribute H=4, I=4 (Appendix C in the ...
- 41
2
votes
1
answer
3k
views
FreeRadius - Authenticate any User & Password
I am trying to help a facility who's radius server crashed - no recoverable data.
The clients are all installed (buried) in vehicles and are not readily accessible (need to tear stuff apart).
Access ...
- 21
2
votes
1
answer
2k
views
Setting up NPS with a certificate that is valid to both AD and non-AD machines
I'm trying to setup an AD server running the NPS service so that both AD and non-AD machines see the certificate as valid when authenticating to the wireless network. I picked up a cert from GoDaddy ...
- 2,823
0
votes
1
answer
3k
views
Daloradius / Freeradius mac authentication
I setup a centos freeradius mysql with the frontend daloradius using the steps on this site http://linuxdrops.com/install-freeradius-with-web-based-management-daloradius-on-centosrhel-debian-ubuntu/
...
- 202
1
vote
2
answers
1k
views
Point of Shared Secrets on RADIUS Servers over a Cisco Switch
I was wondering what the point of Shared Secrets are on RADIUS servers if I set the secret in the Cisco switch configuration. If the supplicant wanting to be authenticated does not have to know it, ...
- 11
10
votes
4
answers
53k
views
Authentication via RADIUS : MSCHAPv2 Error 691
I am working on setting up authentication into an Acme Packet Net-Net 3820 (SBC) via RADIUS. The accounting side of things is working just fine with no issues. The authentication side of things is ...
- 356
0
votes
1
answer
612
views
RADIUS authentication requests not relayed to RADIUS server
I am trying to set up a RADIUS server for 802.1x NAC over a Cisco IE 3000 Network Switch, using freeRadius to implement it.
I know the switch knows where the RADIUS server is because I set up the ...
- 11
0
votes
1
answer
2k
views
Configuring a RADIUS server for 802.1x over a Cisco Switch
I am trying to set up RADIUS authentication over a Cisco switch and I have gone through every tutorial they have.
I am able to get the RADIUS server to authenticate when I access the CLI of the Cisco ...
- 11
0
votes
1
answer
2k
views
Can RADIUS offer protection against spoofed MAC addresses accessing resources protected with MAC Authentication
When running RADIUS via WPA2 Enterprise and 802.1x, clients wishing to access the network must provide valid credentials. However, this does not stop malicious clients forging valid clients MAC ...
- 273
1
vote
2
answers
1k
views
Nagios-Plugin "check_radius" missing in Ubuntu 14.04?
Since I asked this question already on askubuntu but nobody answered for a week perhaps here somebody knows the answere (https://askubuntu.com/questions/462162/nagios-plugin-check-radius-missing-in-...
- 225
0
votes
2
answers
4k
views
RADIUS-sever: Hashing password before checking
I do have to set up a RADIUS server for authentication with a captive portal of pfSense.
Unfortunately, all passwords in the RADIUS' database are hashed with a certain algorithm. I do use a MySQL-...
- 155
1
vote
0
answers
79
views
Troubleshooting 802.1x authentication issue relating to signal strength
My setup:
Windows 2008 R2 server with the NPS role configured for RADIUS _PEAP/MSCHAPV2.
I have a WPA2 Enterprise network configured on the Ubiquity controller.
3 Ubiquity UniFi LR access points.
At ...
- 41
3
votes
1
answer
6k
views
802.1x certificates, EAP-TLS, RADIUS and Windows machines
When using 802.1x certificate-based authentication on Windows machines, should I use different certificate for each machine?
There is RADIUS server running in the network, the machines use EAP-TLS to ...
- 387
1
vote
1
answer
13k
views
802.1x auth without certificate on clients
I'm trying to implement WPA-Enterprise authentication on my UniFi Controller (3.1.10) without the need for certificates on clients.
My RADIUS server will be Windows Server 2012R2 with NPS role ...
- 21
0
votes
1
answer
2k
views
User authentication; PAM or Radius? [closed]
At college I'm part of a group of students that keep a server infrastructure running for the students. Lately we've been having a lot of trouble with the servers, and we decided that it's probably ...
- 187
1
vote
0
answers
720
views
Server 2008 RADIUS on auth non-domain computers
I have read a few articles about the web regarding this, but I seem to be unable to find a definitive answer for my question.
I have an Aruba Networks controller configured to hit a RADIUS server ...
- 11
0
votes
2
answers
455
views
Radius Authentication
I will first tell you a little bit about how I am set up.
I have wireless clients connecting to an ARUBA Mobility Controller using a RADIUS server for Authentication. I need to ensure I can get ...
2
votes
2
answers
10k
views
NPS - RADIUS - Active Directory Authentication
Is it possible to use NPS RADIUS as an intermediary between an application that only supports RADIUS authentication and an active directory server which is used for authentication across the network?
...
- 217
1
vote
1
answer
2k
views
Authentication to Squid proxy with a RADIUS-authenticated client
I want to set up a wireless environment where WPA2-Enterprise is used for authentication to a FreeRADIUS server (using EAP-TTLS or PEAP), and the wireless client is seamlessly routed through and ...
- 273
0
votes
1
answer
4k
views
Authenticate Radius user using pam and ssh [duplicate]
I am able to authenticate radius users using radius server+pam+ssh with creating local user with blank password in linux.
Is it possible to authenticate radius users without creating users in local ...
- 110
2
votes
1
answer
16k
views
How to use Calling-Station-Id on a per user basis in freeRADIUS?
I am trying to limit every user to a small set of Mac-IDs in RADIUS, by directly including the appropriate information in the users file. It would be acceptable even if every user was limited to one ...
- 123
1
vote
1
answer
579
views
Managing Active Directory account access across multiple forests / customers
We do managed IT services for a number of small / medium business. I'm looking to find a solution to manage our access to our clients' AD forest's in a scalable fashion.
Right now, we manually create ...
- 451
1
vote
0
answers
2k
views
How do I set up an 802.1X infrastructure for use with OS X and iPads?
At my workplace I have been tasked with setting up machine certificate based 802.1X wireless authentication for our Apple devices. It seems like on the client side this will be handled by Profiles (...
2
votes
1
answer
2k
views
Freeradius server is not accepting accounting packets through tcpreplay
I am running a free radius server on system A. I am sending test accounting requests using radclient radclient -x systemA acct testing123 from system B. I can see that the radius server recieved these ...
- 131
1
vote
1
answer
4k
views
Setting Up A Windows 2008 NPS Server As A Radius Server For A Cisco AP541N Cluster
I have a cluster of Cisco AP541N access points. I am trying to use the Radius authentication for WPA-Enterprise authentication, but I cannot get the APs to query the server properly.
Does anyone ...
- 14.4k
0
votes
1
answer
2k
views
system authentication and radius authentication
I am using CentOS 6.3 and want to enable ssh RADIUS authentication along with Centos system Authentication.
Right now my server is firstly authenticated with RADIUS server. And after system ...
2
votes
2
answers
5k
views
WPA2-Enterprise vs. Captive Portal, which is more preferable?
My school runs our WiFi network on Aruba Controllers, some of the access points are Aruba-branded and is managed. Others are D-Link branded, and need configuration one by one if needed.
We run our ...
- 131
0
votes
1
answer
1k
views
Expired password change through VPN failure
I am setting up some new accounts to be used by some contractors. they are going to connect via VPN to our network. My requirement is to set the password initially and then have them change it the ...
user35213
1
vote
3
answers
5k
views
How to limit user's access to a specific NAS?
I'm new to RADIUS and I have just set up a very basic FreeRADIUS server for 802.1x (WPA). I use EAP, MySQL as backend with daloRADIUS as webGUI (for user management, mainly).
I got two WiFi networks, ...
- 404
0
votes
3
answers
11k
views
NPS Policy doesn't to respect the "Control access through NPS Policy" user attribute
I have a Win2K8 server with NPS. I am trying to set my VPN authentication on a FortiGate firewall to authorize users via Radius from my Windows server.
I have two policies configured
a Connection ...
- 14.4k
0
votes
3
answers
1k
views
How to prevent users from connecting directly to the switch, where the Access point is connected?
I'm about to setup a large wireless network, at a dorm.
The hardware I'm using is going to be:
HP Procurve E2520-24G-PoE (J9299A)
Cisco Aironet 2602i Autonomous Access Point
Since the outlets at the ...
- 218
2
votes
1
answer
454
views
How to enable two factor authentication
I am using CentOS 6.3 and want to enable ssh RADIUS authentication.
Right now my server is directly authenticated with RADIUS server. I want the server to authenticate with unix credentials first and ...
- 19
1
vote
0
answers
257
views
Checking Statement of Health (NAP) info on Linux using Dhcp and Radius
I have a Linux DHCP server and windows clients. I want my DHCP server to assign an IP address from a network let's say 10.6.3.0/255.255.255.128 if the client has it's firewall enabled or an IP address ...
- 211
0
votes
0
answers
1k
views
Radius AAA authentication failover
I know this question has been asked on here but I cannot seem to figure this out. I am trying to get radius to failover to local authentication but whenever I turn off radius it won't failover. ...
- 1
2
votes
1
answer
6k
views
Radius connection with Windows 7 computers
I have many Ubiquiti Unifi APs connected to a Windows Server 2012 NPS radius server.
I configured security policies to let domain users connect to the local network.
I'm having some trouble with ...
- 1,322
0
votes
1
answer
1k
views
Configuring C2950 with 802.1X/PEAP and RADIUS server
I am setting up 802.1X security on a LAN which has a C2950 switch that controls access from the WLAN to the Ethernet LAN. I plan to use PEAP. I read this the Cisco article on configuring 802.1X ...
- 356
0
votes
1
answer
197
views
What decides what tunnels inside EAP-TTLS?
If EAP-TTLS is a EAP method that establishes a TLS tunnel, what goes in the tunnel? It could be another EAP method, but it could also be PAP. What decides? The server, the supplicant, or do they ...
- 647
0
votes
1
answer
258
views
How to compute CRC in radius response
I have two different proprietary software, one is radius module for billing, second is phone station pbx.
When client doing a call, pbx sends radius auth packet to the billing. And billing answering.
...
- 2,270
2
votes
1
answer
1k
views
Allowing multiple IP addresses for a single VPN user
Currently for one of the company I am using ASA 5505 as an VPN server with freeradius (mysql module) as an authentication backend.
User authenticatin is based on the group password, user password ...
- 1,631
1
vote
0
answers
2k
views
FreeRadius external authenification script
I am trying to configure FreeRadius to work with my external authentification script.
I have a custom module
exec myscript {
wait = yes
shell_escape = yes
program = "/path/...
- 111
7
votes
2
answers
1k
views
Network Policy Server Granular Time Restrictions
I am configuring NPS as a RADIUS authentication source for my wireless clients.
I am trying to differentiate between school hours and after hours as I need to connect certain users to a different ...
- 243
2
votes
1
answer
3k
views
openvpn refusing connections with freeradius
I installed openvpn and freeradius from yum and I installed the radiusplugin_v2.1a_beta1.tar.gz but I am having connection issues with the error:
XML-RPC: ConnectionRefusedError: 10061: No connection ...
- 6,691
1
vote
1
answer
6k
views
Cisco ISE Wlan user authentication fails for users with umlaut
We have setup a Cisco Identity Services Engine to manage WLAN access for our users.
Access should be granted to users from a specific Windows Active Directory group.
This works fine for users having a ...
- 834
1
vote
1
answer
2k
views
Using NPS to restrict access to WLAN
We currently have one WLAN that only domain users can connect to. We will be adding a guest WLAN and would like all non-domain machines to use this, even if a user has a domain account.
We have set ...
- 429
3
votes
1
answer
2k
views
Registation or Guest VLAN for 802.1x via Microsoft NPS
I am currently working on a Microsoft NPS solution to provide 802.1x MAC authentication for wired and wireless clients along with providing a VLAN for the clients to be moved to.
It currently works ...
- 31
1
vote
1
answer
3k
views
Machine account authentication on Radius server
My workstation is under Linux. I have an Active Directory domain controller + Radius server on Windows 2008.
I can verify user account 'radius-01' using 'radtest' tool:
$ radtest -t pap radius-01 ...
- 31
2
votes
1
answer
1k
views
PEAP validation against a different, secondary domain?
Probably a little bit confusing, so let me explain the situation.
Our company wants to implement a corporate wireless LAN with PEAP authentication. Unfortunately, someone made a big mistake in our ...
- 155
2
votes
2
answers
5k
views
Windows 7 Wifi Certificate Trust Anchor
When attempting to connect to our company wireless while not on the domain, I receive a message saying that our RADIUS server provided a valid certificate issued by our root CA, but that the root CA ...
- 31
7
votes
1
answer
5k
views
WPA2 Enterprise without a Client-End Certificate
This question is practically identical to this question, but the difference being that the authentication server is freeRADIUS on Ubuntu and the access-points are DD-WRT.
Additionally, I would like ...
- 370
1
vote
1
answer
11k
views
Use RADIUS authentication with Remote Desktop Services
I have a PhoneFactor implementation that I love and cherish for VPN access. PhoneFactor provides us a RADIUS server that checks against an approved-users list and our Active Directory implementation, ...
- 3,250