Questions tagged [freeradius]

FreeRADIUS is an open source RADIUS server

FreeRADIUS is an open source RADIUS (Remote Authentication Dial-In User Service) server. It implements AAA: Authentication, Authorization, and Accounting. It is very flexible and has many modules. It supports many backend databases such MySQL, PostgreSQL or Redis for retrieving/saving AAA data.

Official website.

275 questions
0
votes
1 answer

WPA2 enterprise: username/password-prompt-less setup on a mixed network: XP/SP3, Mac OS X, Linux, iOS

I asked a question recently about setting up WPA2 enterprise, and I have a couple of ancillary questions. First, regarding the use of the OpenSSL cnf files for the certificate generation. I have a number of them in /etc/raddb/certs, which came in…
Sonny
  • 183
  • 1
  • 8
0
votes
1 answer

coovachilli + freeradius, how to check how many users are currently login?

I installed CoovaChilli (AC) + freeradius in Ubuntu 10.10 successfully. How could I check how many user has already login and still remain active ?
Cthoong
  • 1
  • 1
0
votes
1 answer

Radius Authorization against ActiveDirectory and the users file

I have a problem with my freeradius server configuration. I want to be able to authenticate users against Windows ActiveDirectory (2008 R2) and the users file, because some of my co-workers are not listed in AD. We use the freeradius server to…
mohrphium
  • 645
  • 2
  • 9
  • 17
0
votes
1 answer

freeradius address assignment from ippool

I'm trying to figure out how to assign IP addresses from an ippool to mobile units. Ideally, I would like a unit to receive the same IP at each request. There is no data source to use to populate static entries for each unit, so I would prefer each…
Bittrance
  • 3,070
  • 3
  • 24
  • 27
0
votes
1 answer

WPA2-Enterprise and RADIUS accounting server

Is mandatory to use WPA2-Enterprise to be able to send accounting packages to my RADIUS server from an access point (Meraki)?
PachinSV
  • 193
  • 1
  • 1
  • 9
0
votes
1 answer

Radius sqlcounter key

The short version of my question is how do I limit individual user sessions to 24 hours, even if each session has the same UserName. I have a radius server setup with CoovaChilli to authenticate wireless users to access the network. All the users…
rday
  • 121
  • 7
0
votes
2 answers

Can radius interact with pptp beyond authentication?

I've managed to setup pptp to use Radius authentication - making it much easier to manage users in an sql database than the default password file. However, ideally I'd like to be able to get the status of these users and disconnect/manage them as…
Joe
  • 344
  • 2
  • 7
  • 23
0
votes
0 answers

Manage nuumber of connections for OCserv and FreeRADIUS

I have numbers of Ocserv servers and connected to a FreeRADIUS server for authentication. I have configured directive bellow in Ocserv of each server to don't let a user connect more than 2 times. max-same-clients = 2 but it works in server itself…
AminMZ
  • 3
  • 2
0
votes
0 answers

how to set up eat /etc/pam.d/radiusd file to authenticate a user with his username, password and Google Authenticator token. Using Freeradius for 2FA

i have a problem about configuring the “/etc/pam.d/radiusd” file. I am working on a Linux Debian System. rn this is my configuration: auth requisite pam_google_authenticator.so forward_pass auth required pam_unix.so use_first_pass account required…
0
votes
1 answer

Freeradius failed to start with dhcp port 67

I'm trying to use freeradius with dhcp on debian 12. I'm relaying DHCP packets from the router. FR setup with DHCP listen port 67 : freeradius -X works just fine, as expected. But systemd cannot start the service. And unfortunately I cannot find…
amlanhldr
  • 31
  • 4
0
votes
1 answer

FreeRADIUS / Active Directory / Computer Authentication / VLAN based off of UserDN

I am currently determining VLAN/dACL assignment based off of group membership of the computer authenticating and would like to instead switch to determining VLAN/dACL assignment based off of the OU location of the computer. I seem to be unable to…
0
votes
0 answers

FreeRADIUS Certificate Based Authentication WiFi

We are currently trying to deploy a new SSID for BYOD devices. The plan is to host a FreeRADIUS (CA) server and generate a certificate which can be shared to all staff and can be imported onto their devices. Is it solution feasible? If yes, does…
0xab3d
  • 101
  • 3
0
votes
0 answers

OPNsense with Radius Accounting

I've been testing OPNsense radius accounting by following this document, https://docs.opnsense.org/manual/how-tos/accounting.html I am able to authenticate user through the captive portal but there is no 'reply-message' being shown on the user side…
Mindf
  • 1
0
votes
0 answers

Authenticate windows 7 PCs with Radius server

I have a network of Windows 7 PCs. And I am looking for a way to authenticate these computers through a centralized credential server. AD was one of the options but I don't have license for Windows server so I was trying to use Radius. I installed…
0
votes
2 answers

802.1x with GoDaddy Certificates EAP-TTLS

I have a little question. I am not sure but does clients need to resolve AAA Server via DNS and need to reach AAA Server if I use EAP-TTLS with GoDaddy x509 Certificates to verify the certificate on e.g. Mobile Devices? I have a AAA Server in a…