Questions tagged [radius]

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

RADIUS is a client/server protocol that runs in the application layer, using UDP as transport. The Remote Access Server, the Virtual Private Network server, the Network switch with port-based authentication, and the Network Access Server (NAS), are all gateways that control access to the network, and all have a RADIUS client component that communicates with the RADIUS server. The RADIUS server is usually a background process running on a UNIX or Microsoft Windows server.[3] RADIUS serves three functions:

  • to authenticate users or devices before granting them access to a network
  • to authorize those users or devices for certain network services and
  • to account for usage of those services.

Source: wikipedia

355 questions
0
votes
1 answer

DD-WRT + TekRADIUS: Having issues getting it to work

Has anyone else gotten it to work? My setup: Router: Netgear WNR3500v2 WAN IP: y.y.y.y Radius: off Wireless Security: Security Mode: WPA2 Enterprise WPA Algorithms: AES Radius Auth Server Address: x.x.x.x Radius Auth…
NullVoxPopuli
  • 305
  • 1
  • 4
  • 13
0
votes
1 answer

Will RADIUS allow me to have authentication from an SBS domain in a 2003 domain?

I'm no RADIUS expert. But my understanding is that RADIUS can use Active Directory as a 'realm' to authenticate. This got me thinking - We have 3 separate clients in one building, and we manage the infrastructure. It would be sweet if we could have…
Mister IT Guru
  • 1,178
  • 3
  • 15
  • 35
0
votes
2 answers

How to configure FreeRadius to accept all authentication requests?

I'm attempting to configure FreeRadius to work with Dynamic VLAN Assignment. What I'm attempting to do, is return a specific VLAN ID for known hosts, but return a default VLAN ID for unknown hosts. This is my first stab at creating a…
Bryan
  • 7,628
  • 15
  • 69
  • 94
0
votes
1 answer

freeradius authenticate over ldap log files

when config free-radius to authenticate over ldap where are the log files that store usernames and other connected client info? excuse me for my bad English.
hamedsh
  • 389
  • 2
  • 5
  • 18
0
votes
1 answer

pam_auth_radius - RADIUS users vs unix users

I have recently set up a server with FreeRADIUS to authenticate and keep track of admin logins on some of my devices. I'm looking at getting my Linux and FreeBSD machines authenticating against RADIUS using the pam_auth_radius module. I am…
Cory J
  • 1,568
  • 5
  • 19
  • 28
0
votes
1 answer

OpenBSD logins via SSH seem to be ignoring my configured radius server

I've installed and configured a radius server upon my localhost - it is delegating auth to a remote LDAP server. Initially things look good: I can test via the console: # export user=skemp # export pass=xxx # radtest $user $pass localhost 1812…
user9565
0
votes
1 answer

How would I relay/proxy/mirror RADIUS from one server to another?

Scenario... I have a Windows Server 2003 box acting as a RADIUS server that is connected to my AD in network A. I have network B which is not connected to network A. Can I install something on a box in network B that would relay RADIUS traffic over…
Corey
  • 2,031
  • 12
  • 39
  • 54
0
votes
2 answers

VPN Router + LDAP/RADIUS?

I need a VPN-capable router, preferably with a web interface, that should be able to authenticate against my LDAP server which is behind the router. I'm utterly unable to configure that setup for the Linksys RVS4000 that I own. Does anything exists…
user37442
0
votes
2 answers

PPPoE and FreeRadius

We have a number of wireless clients using ubiquity radios that support PPPoE. The number of connected clients is currently sitting around 20. But this is increasing rapidly and we want better control so we plan to authenticate users against a…
hookenz
  • 14,472
  • 23
  • 88
  • 143
0
votes
0 answers

accel-ppp add Domain-Name RADIUS attribute in Access-Request packets

Anyone here has experience in accel-ppp. My goal is I want to include the Domain-Name RADIUS attribute in User-Name attribute when accel-ppp sends Access-Request packets to RADIUS server. Example, User-Name@Domain-Name, anyone here tried same…
0
votes
0 answers

Apache Basic authentication based on AuthUserFile is ignored, when mod_auth_radius.c is enabled

I hope you can help me with my problem. I initially had a vhost config with Basic Authentication with "AuthUserFile" which works fine. Now I wanted to use Radius for certain sites and installed "mod_auth_radius" according to the instructions. Since…
matrix154
  • 11
  • 1
0
votes
0 answers

OPNsense with Radius Accounting

I've been testing OPNsense radius accounting by following this document, https://docs.opnsense.org/manual/how-tos/accounting.html I am able to authenticate user through the captive portal but there is no 'reply-message' being shown on the user side…
Mindf
  • 1
0
votes
0 answers

Authenticate windows 7 PCs with Radius server

I have a network of Windows 7 PCs. And I am looking for a way to authenticate these computers through a centralized credential server. AD was one of the options but I don't have license for Windows server so I was trying to use Radius. I installed…
0
votes
0 answers

Dynamic Client IP in freeRADIUS where client is identified by secret

I have multiple locations sending RADIUS requests to my server. These are currently configured as: client any_client { ipaddr = x.x.x.x netmask = 32 secret = client_secret shortname = name } However some clients have ISP that…
0
votes
0 answers

Authentication and user manager for Ubuntu

I'm a little bit confused about user management / authentication systems. I would like to achieve the following: Have a central database of users / organization units (like Active Directory) - FreeIPA Have SSO capabilities (SSO login page, etc),…
Kristof Rado
  • 113
  • 1
  • 5