Questions tagged [radius]

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

RADIUS is a client/server protocol that runs in the application layer, using UDP as transport. The Remote Access Server, the Virtual Private Network server, the Network switch with port-based authentication, and the Network Access Server (NAS), are all gateways that control access to the network, and all have a RADIUS client component that communicates with the RADIUS server. The RADIUS server is usually a background process running on a UNIX or Microsoft Windows server.[3] RADIUS serves three functions:

  • to authenticate users or devices before granting them access to a network
  • to authorize those users or devices for certain network services and
  • to account for usage of those services.

Source: wikipedia

355 questions
1
vote
2 answers

Certificate Authority - RADIUS/WPA

We have a problem with our Certificate Authority, it deletes its own Computer Certificate day-by-day. I implement a WPA wireless security via RADIUS standard with using that computer. So everyday I have to renew computer certificate. When I check…
1
vote
1 answer

PowerShell commands to manage NPS Radius policies?

Are there PowerShell commands for managing NPS RADIUS policies? I see commands for RADIUS clients (Get-NpsRadiusClient; etc), but nothing for the policies, I can't find a command to create the NPS shared secret (there is Get-NpsSharedSecretTemplate,…
user3271408
  • 175
  • 1
  • 5
  • 17
1
vote
0 answers

Bypassing Network Policy Server with Azure AD Extension

I hope someone can help guide me here! We have a RDS environment and introduced Azure MFA and built it successfully using the following guide here:…
cOzMaTiC
  • 158
  • 2
  • 5
1
vote
0 answers

Any way to do virtual 802.1x inside Linux?

I'm trying to test out 802.1x in a virtual environment but I haven't been able to find any good resources/guides on how to do that. The scenario is something like this: I have a Linux host machine (OS: ubuntu jammy) with a couple of lxc containers…
A. Trevelyan
  • 478
  • 1
  • 10
1
vote
1 answer

Laptop asking for "action needed" on NPS Computer auth WiFi connect, despite valid Server Thumbprint

I have configured computer authentication on WiFi connect to company network, using the microsoft nps server, group policy certificate auto-enrollment and group-policy wifi config. Has been working just fine for several years. Recently my laptop…
Jasper
  • 1,154
  • 10
  • 8
1
vote
0 answers

802.1x NPS Machine authentication

We are trying to implement 802.1x to authenticate wirelless users (Aruba Controller) through RADIUS (Windows server 2019 NPS), For mobile phones and guests devices, we have successfully configured the authentication via user (AD Account) , but for…
1
vote
0 answers

How to connect device with no web browser to RADIUS WPA2 Enterprise wifi network

I am trying to connect a Bresser 5-in-1 Weather Station to a workplace's wifi network, which uses RADIUS WPA2 Enterprise security. From a laptop or smartphone I can connect to the network and then enter my credentials (user name and password) to get…
CesarGon
  • 440
  • 3
  • 14
  • 27
1
vote
0 answers

Disassociated WLAN (Disassociated due to inactivity)

I am reading the logs provided by an access point I have broadcasting an 802.11i (WPA) LAN network running with a radius authentication method, and the log returns the following two messages: Aug 31 10:09:54 10.100.1.78 CONN-LOGIN_INFO: [WLAN-1]…
user3105
  • 129
  • 1
  • 6
1
vote
0 answers

Freeradius doesn't start when CoS user attributes are configured

I have a problem with a POC, I tried use Freeradius for authentication purpose and assign attributes for users of a broadband network (PPPoE). When I configure the user with this parameters I can connect the PPPoE client in the network and the…
1
vote
0 answers

FreeRADIUS cannot bind to FreeIPA

I have installed FreeRADIUS and FreeIPA on the same machine running Fedora 33. IPA is working as expected and can have clients join and authenticate. LDAP command line tools (ldapsearch, ldapmodify) can successfully bind to the server both locally…
Pontus
  • 11
  • 2
1
vote
1 answer

Strongswan central authentication for already exisint users in database

I have read a lot about authenticating Strongswan to SQL/PAM but can't find any idea/solution how to authenticate against a database where already there are a plenty of username and password combination encrypted with bcrypt+salt. I don't know the…
csib
  • 13
  • 2
1
vote
0 answers

Apache2: RADIUS authentication before rewrite engine HTTPS

I tried to set up a reverse proxy with HTTPS and Radius authentication. Unfortunately, I don't get an authentication query before it redirects to the HTTPS page. What did I do wrong? Require all granted …
1
vote
1 answer

FreeRadius doesn't log request in Debug mode

Sorry, Radius newbie here … I try to get a FreeRadius server version 3.0.20 as packaged by NixOS running to authenticate users on a dlink access point. I'm running the server with debug logging enabled. I started with the default configuration and…
1
vote
1 answer

802.1X Chicken or the Egg?

I'm reading about 802.1X and WPA-2 Enterprise and how to set up it. I've read briefly about the different EAPs and understand that EAP-TLS is the better method of authentication due to the use of client and server certificates. However I'm…
1
vote
0 answers

How can I authenticate with both Synology OpenVPN + Radius Plugin?

I would like to have a double authentication: Certificate based authentication in OpenVPN as well as User/Password authentication via the Radius-Plugin provided on the server (Synology NAS DS2016play with DSM 6.2.3-25426). Client is a Raspberry PI 4…