Questions tagged [radius]

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

RADIUS is a client/server protocol that runs in the application layer, using UDP as transport. The Remote Access Server, the Virtual Private Network server, the Network switch with port-based authentication, and the Network Access Server (NAS), are all gateways that control access to the network, and all have a RADIUS client component that communicates with the RADIUS server. The RADIUS server is usually a background process running on a UNIX or Microsoft Windows server.[3] RADIUS serves three functions:

  • to authenticate users or devices before granting them access to a network
  • to authorize those users or devices for certain network services and
  • to account for usage of those services.

Source: wikipedia

355 questions
0
votes
0 answers

Windows NPS refusing all network policies or ignoring correct credentials

I have a AD-joined Windows Server 2019 Standard with NPS installed and AD connected. When I try to RADIUS authenticate it always fails and this is unfixable so far. The RADIUS Clients are configured as well as the Connection Request Policies (only…
Philipp
  • 123
  • 1
  • 4
  • 13
0
votes
1 answer

Daloradius ERROR: (3) sql: ERROR: rlm_sql_mysql: ERROR 1054 (Unknown column 'acctupdatetime' in 'field list')

Getting the following error after configuring freeradius with daloradius. ERROR: (3) sql: ERROR: rlm_sql_mysql: ERROR 1054 (Unknown column 'acctupdatetime' in 'field list') Radius server accounting does not seem to be working. Used the SQL schema…
xaander1
  • 121
  • 1
  • 7
0
votes
1 answer

FreeRADIUS accept any password for one user only

I need to configure one user on FreeRADIUS to authenticate and generate an access-accept regardless of the password submitted by the user. I can see how to do this for all users, but how can I do this for a single user?
btongeorge
  • 277
  • 1
  • 11
0
votes
0 answers

CentOS 7 , OpenVPN Server Radius Plugin

On my new openvpn server install radius plugin can not read client status. It worked on previous installation, now all things are the same, but not working. OpenVPN Server Conf: port 57192 proto udp dev tun user nobody group…
0
votes
1 answer

NPS Radius Configuration EAP-Ms-Chapv2

I'm tryng to fix my Microsoft Server 2016 Network Policy Server configuration as radius server, with PEAP-MSChapv2. As well known some modern devices are not able to "not validate" server certificate because this is option is too weak and had been…
mnet
  • 11
  • 4
0
votes
2 answers

Can radius be configured to assign ip addresses?

I would need to know if a radius server can be configured in such a way that it allows to assign a specific ip address to a device when it connects. I mean, when a mobile device connects to the wifi network issued by an access point and…
user3105
  • 129
  • 1
  • 6
0
votes
0 answers

Logging all SSH commands from a linux Jumpbox

I'm tasked with coming up with a solution for our NOC to implement MFA\secured access on our routers. There are caveats to doing this as TACACS\RADIUS is only supported on the MGMT interface amongst other limitations (I don't want to risk getting…
0
votes
1 answer

On Premise NPS server check computer account in Azure AD

I've got a Windows based NPS Radius server for authenticating my wireless clients based on device certificates (supplied by my internal CA). In my NPS network policy I have set conditions to grant access only when that the computer is a member of…
0
votes
1 answer

OPNSense and Unifi RADIUS issue

I have an OPNSense firewall and a Unifi controller I am trying to enable Radius authentication and Radius Vlan assignment On the unifi side I have done the following Created an SSID Created A radius profile Created a network On the OPNSense side I…
0
votes
0 answers

Client hostname attribute in radius request

I am now trying to run logging of accounting information into my database. I use FreeRadius. I have read at glance a few RFC for radius accounting and authentication, so I expect that it is not possible, but I want to ask. Is there any attribute for…
0
votes
1 answer

keepalived - "notifiy_master"/ "notify_backup" does not start/stop application

I want to start/stop a freeradius depending on the master (start) or the backup (stop) state of the keepalived instance. The freeradius is listening for accounting messages on the shared virtual ip. I tried to reach this with notify_master and…
ryudo
  • 1
  • 1
0
votes
1 answer

Failed To Authenticate To NPS Server

I am running an NPS Server on my Windows Server 2019 of my network. I use it to authenticate into my Cisco C9300 switches as an administrator to work on them. Recently I am unable to login as it says I am not authenticated. Here is a copy of the NPS…
JukEboX
  • 815
  • 4
  • 17
  • 46
0
votes
2 answers

Radius Authentication error between Active Directory NPS - Aruba 2930f

I am trying to configure Radius authentification using NPS backend. I have configured both ends but it does not seem to work.I am not sure if this is even correct. Kindly help. NPS Config: I have added my switch info under Radius Clients by giving…
Shruthi
  • 101
  • 1
0
votes
1 answer

radius traffic accounting - what attributes do I use for traffic (and how)

we are building a web front end for a internet access token management system that uses radius (freeradius) queried from a captive portal. Reason for building this part is the integration into the accounting and billing platform that operates…
Mark Regensberg
  • 1,411
  • 12
  • 14
0
votes
0 answers

freeradius and configure eap or pap with rest

free radius and configure eap or pap with rest i want use strongswan with free radius and rest module, i see sql and eap work together, how can configure eap with rest ? the important part is strongswan not send password to radius server. server os…
1 2 3
23
24