Questions tagged [radius]

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

RADIUS is a client/server protocol that runs in the application layer, using UDP as transport. The Remote Access Server, the Virtual Private Network server, the Network switch with port-based authentication, and the Network Access Server (NAS), are all gateways that control access to the network, and all have a RADIUS client component that communicates with the RADIUS server. The RADIUS server is usually a background process running on a UNIX or Microsoft Windows server.[3] RADIUS serves three functions:

  • to authenticate users or devices before granting them access to a network
  • to authorize those users or devices for certain network services and
  • to account for usage of those services.

Source: wikipedia

355 questions
3
votes
1 answer

What are the Precautions to be taken while configuring RADIUS authentication for Routers,Switches & Firewalls

Have quite a few questions for Implementing Radius for my network devices : How to safely implement aaa Radius authentication to make sure users have login using LOCAL database incase the Radius fails. How to provide only read access for few users…
gHP
  • 39
  • 2
3
votes
2 answers

Freeradius authentication failed for unknown reason

I followed this instruction to force freeradius to use mysql database. and run freeradius in debug mod. but it rejects all authentication. mysql database : mysql> select * from radcheck; +----+----------+-----------+----+---------+ | id | username |…
Moein Hosseini
  • 241
  • 3
  • 6
  • 13
3
votes
1 answer

Auth-Type :- Reject in RADIUS users file matches inner tunnel request but sends Access-Accept

I have WPA2 802.11x EAP authentication setup using FreeRADIUS 2.1.8 on Ubuntu 10.04.4 talking to OpenLDAP, and can successfully authenticate using PEAP/MSCHAPv2, TTLS/MSCHAPv2 and TTLS/PAP (both via the AP and using eapol_test). I am now trying to…
mgorven
  • 30,615
  • 7
  • 79
  • 122
3
votes
1 answer

Sign an OpenSSL .CSR with Microsoft Certificate Authority

I'm in the process of building a Debian FreeRadius server that does 802.1x authentication for domain members. I would like to sign my radius server's SSL certificate (used for EAP-TLS) and leverage the domain's existing PKI. The radius server is…
user62491
3
votes
1 answer

Is a PKI required when authenticating a Cisco Aironet AP via radius against AD

We're a small office and have a Cisco Aironet 1250 access point set to WPA-PSK. Now that we've deployed Active Directory I'd like start authenticating my users via radius instead of a PSK. To this end I've installed NPS on my SBS 2011 server. The…
Martijn Heemels
  • 7,728
  • 7
  • 40
  • 64
3
votes
1 answer

Is there such a thing as "server sliding" (or similar), and if so, what is it?

I am not a network engineer, but rather a translator, so I apologize in advance if this is a rather obvious question to some of you. Normally Google can answer my questions, but in this case I'm coming up blank. If I'm asking this in the wrong…
mahoke
  • 31
  • 2
3
votes
2 answers

EAP / MSCHAPv2 authentications fails (only) on Windows with custom authenticator

I have a project that involves custom client authentication for the StrongSwan IKEv2 server implementation on Linux. I am running: StrongSwan 5.4.0 with eap-radius plugin Currently, we use FreeRadius to speak EAP-MSCHAPv2 with various client…
Domokun
  • 31
  • 1
  • 5
2
votes
0 answers

pfSense: config with daloRadius (freeRadius) to setup download quota limitation

I have pfsense and daloRadius(running freeRadius inside) up and running, I successfully configured radius parameters on pfSense and the NAS on daloRadius and they can talk to each other. I am able to create users from daloRadius and authenticate…
Xsmael
  • 171
  • 1
  • 10
2
votes
2 answers

How do I get a Linux box to use RADIUS authentication with a certificate?

Googling anything involving RADIUS configuration has been hell, as many of the terms get mixed together, making search results useless, so... I have a RADIUS server offering EAP-TTLS based communication using a certificate signed by a private CA to…
Tim Morris
  • 135
  • 5
2
votes
1 answer

Adding compiled FreeRADIUS to systemd

Working on getting FreeRADIUS up and running and having issues adding to systemd. Running standalone via radiusd -X works expected and all of the custom configurations are intact. Using freetds module to connect to MS SQL backend... During…
Arnydo
  • 23
  • 1
  • 6
2
votes
1 answer

EAP-TLS: How to verify a p12 key with freeradius?

I installed a Radius server with a EAP-TLS only configuration. I have a client.p12 file that is supposed to contain both the root-CA and the client certificate. I added the p12…
Alexis
  • 172
  • 1
  • 12
2
votes
1 answer

IAS migrate from 2003 server to 2008 r2

I have recently upgraded all our DC's from 2003 svr to 2008 r2 servers. I had a radius server in the existing environment for 8021x authentication. I successfully exported the configuration to a text file and successfully imported it into 2008 r2…
JohnyV
  • 938
  • 4
  • 26
  • 45
2
votes
0 answers

FreeRADIUS with Let's Enrypt Certificate (trusted connection without provisioning?)

I have a FreeRADIUS server set up for PEAP/MSCHAPv2 connections with an SQL user backend. On that server, I have set up a Let's encrypt certificate for domain access.example.org. This certificate is valid, both if used for SSL (e.g. for a guest…
PiMaker
  • 151
  • 1
  • 5
2
votes
1 answer

smb fails to start on centos7 radius server

I have a working radius server that auths connections to a PDC AD server. I wanted to create another one so that I can fail over on the firewall when needed. I created a second server using the same configs as the first. When I have the following in…
IRBiddlecombe
  • 21
  • 1
  • 3
2
votes
0 answers

Freeradius multi-factor auth with LDAP and Yubikey

I just set up a freeradius server and would like to be able to authenticate using both the password of a ldap user and the yubico otp generated from their yubikey. It is working using the ldap password out of the box without any configuration, but I…
eli0T
  • 110
  • 11