Questions tagged [radius]

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

RADIUS is a client/server protocol that runs in the application layer, using UDP as transport. The Remote Access Server, the Virtual Private Network server, the Network switch with port-based authentication, and the Network Access Server (NAS), are all gateways that control access to the network, and all have a RADIUS client component that communicates with the RADIUS server. The RADIUS server is usually a background process running on a UNIX or Microsoft Windows server.[3] RADIUS serves three functions:

  • to authenticate users or devices before granting them access to a network
  • to authorize those users or devices for certain network services and
  • to account for usage of those services.

Source: wikipedia

355 questions
0
votes
1 answer

OATH TOTP with Windows NPS Server?

I'm trying to set up multi-factor authentication for AWS WorkSpaces using AD and OATH TOTP (e.g. Google Authenticator). In the AWS AD Connector config you can set up the RADIUS server's IP, port and shared code. If I understand correctly the…
Nelson Rothermel
  • 573
  • 1
  • 5
  • 9
0
votes
0 answers

Protocol used between a RADIUS client and a computer?

I can't find documentation about the protocol used when a computer wants to reach a network with 802.1x. RADIUS client (switch, access point) use UDP/1812-1813 to communicate with RADIUS server. How does computer (at this point with no IP) and…
setenforce 1
  • 1,200
  • 6
  • 10
0
votes
0 answers

Purchasing a certificate for Freeradius / WPA-Enterprise

I'm moving my WiFi to WPA-Enterprise, using a Freeradius server that authenticates with our Samba 4 directory. I'm currently using a self-signed certificate, but want to move to a purchased certificate instead. I understand the proper way would be…
pgb
  • 455
  • 1
  • 6
  • 18
0
votes
0 answers

An error occured during the Network Policy Server use of Extensible Authentication Protocol

It has been almost two weeks to get my radius server up and running. I think i have run in almost to all the issue known to Radius :). Am guessing this to be a Certificate issue, Please go through the radius dump from the switch below. The error am…
0
votes
0 answers

RADIUS server does not call a custom script

I do have a RADIUS server which called a custom script for authentication in the past. In the /etc/freeradius/sites-enabled/default, I modified the following lines to archieve this: authorize{ update control{ Auth-Type := `/usr/bin/php5…
Drudge
  • 135
  • 1
  • 2
  • 12
0
votes
1 answer

FreeRADIUS 3 and Wildcard Certs

I am setting up a new FreeRADIUS server here on campus, jumping from v1 to v3 (I was not here when the original was setup). Things seem to be working fine, but I do not understand how the certificates portion works when using Windows 7. We have a…
0
votes
2 answers

Active Directory / Freeradius / ntlm_auth / mail attribute

I am currently configuring a linux server with Freeradius to have our clients authenticate against our Active Directory for our WiFi-network. The goal is to have our users use the e-mail address that is present the Active Directory as the 'mail'…
0
votes
1 answer

EAP-PWD with FreeRADIUS 3

I'm trying to setup EAP-PWD using FreeRADIUS 3. However, I can't get it to work and documentation is virtually non-existent. Thus, I don't know whether the problem I'm running into is a misconfiguration or an actual bug. Configuration This is my…
Compizfox
  • 384
  • 1
  • 6
  • 18
0
votes
0 answers

RADIUS w/ NPS, Sonicwall, and Meru Wireless

EDITED 3/23: I've been trying to configure a DS/NPS->Sonicwall->Meru Controller>Client RADIUS Wifi solution and I haven't had much success on the sonicwall side. I've shortened all shared secrets to 8 characters(I heard that was an issue), and…
nerdythor
  • 1
  • 4
0
votes
0 answers

Windows 2008 Radius Client

I'm trying to search for a way to have Windows 2008 as a Radius client to authenticate itself with the corporate Radius server. AD is currently out of the picture, and my superiors want me to look into integrating it with Radius. Although, in…
0
votes
1 answer

Does "aaa accounting commands" not support radius?

When I issue this command: aaa accounting commands 15 default start-stop group myradiusgroup I get this error: %AAAA-4-SERVNOTACPLUS: The server-group "myradiusgroup" is not a tacacs+ server group. Please define "myradiusgroup" as a tacacs+ server…
red888
  • 4,183
  • 18
  • 64
  • 111
0
votes
2 answers

radclient:: Failed to find IP address

I installed freeradius on CentOS 6.6 and I have configured the files /etc/raddb/clients and /etc/raddb/users. I am trying to test the server by this command : radtest Aicha passme 127.0.0.1 100 testing123 This is the result : radclient:: Failed to…
Souad
  • 236
  • 3
  • 4
  • 14
0
votes
1 answer

Copy data from Azure AD to vm AD?

Currently I only have Azure AD that work with Office 365. Now I am planning to create a vm to use RADIUS server. I need to copy user and groups from Azure AD to vm AD. So, how can I do that? I read many articles and forums and only found the ways to…
0
votes
1 answer

New root CA will not list schema version 2 & 3 certificate templates

I'm trying to decommission a Server 2008 machine that hosts DC, NPS, and CA. I've deployed two new servers to take over as root CA and RADIUS server (both new servers are 2012R2). The new root CA is issuing certificates (DC authentication…
0
votes
1 answer

Daloradius / Freeradius mac authentication

I setup a centos freeradius mysql with the frontend daloradius using the steps on this site http://linuxdrops.com/install-freeradius-with-web-based-management-daloradius-on-centosrhel-debian-ubuntu/ The installation seems ok i tried telneting and…
jmazaredo
  • 202
  • 5
  • 13