Questions tagged [radius]

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

RADIUS is a client/server protocol that runs in the application layer, using UDP as transport. The Remote Access Server, the Virtual Private Network server, the Network switch with port-based authentication, and the Network Access Server (NAS), are all gateways that control access to the network, and all have a RADIUS client component that communicates with the RADIUS server. The RADIUS server is usually a background process running on a UNIX or Microsoft Windows server.[3] RADIUS serves three functions:

  • to authenticate users or devices before granting them access to a network
  • to authorize those users or devices for certain network services and
  • to account for usage of those services.

Source: wikipedia

355 questions
1
vote
1 answer

StrongSwan on Amazon Linux with RADIUS

I'm trying to run strongSwan on an Amazon Linux instance with authentication against RADIUS but I receive an error when trying to start strongSwan charon[9518]: 00[CFG] RADIUS initialization failed, HMAC/MD5/RNG required To install strongSwan I…
Christian
  • 796
  • 3
  • 13
  • 31
1
vote
1 answer

Allow user to ssh to server without having local account

I have a pam_radius module set up on a rhel7 server. A user with a local account is able to ssh into the server with the radius login information. I was wondering if it is possible to allow a user to authenticate to the radius server, and if it is…
goris29
  • 11
  • 2
1
vote
1 answer

"Transport encryption required" when using transport encryption

I'm trying to set up a radius server to authenticate against LDAP, but I'm running into a weird issue: rlm_ldap (ldap): Bind with radiusd@[domain] to ldaps://localhost:636 failed: Strong(er) authentication required rlm_ldap (ldap): Server said:…
Dessa Simpson
  • 539
  • 7
  • 27
1
vote
1 answer

Is it possible to host a RADIUS server on Windows 7

Is it possible to host a RADIUS server on Windows 7. I am trying to use this as an authenticating server for my Routers. A third-party application is fine, however maybe if its possible it can use IAS or NPS? I tried to enable IAS through the…
Bryan
  • 13
  • 1
  • 5
1
vote
0 answers

Freeradius Proxy eap-mschapv2 auth to non-eap Radius server

I'm using strongswan 5.6.0 & Freeradius 3.0.13 on CentOS7 as vpn server - Strongswan send radius requests to freeradius - freeradius proxy all request to another Radius Server that not support EAP challenge All non-eap request from freeradius…
1
vote
0 answers

Use two Auth-Type in FreeRadius

I have a RADIUS server with works with mysql, I use this RADIUS for AAA for 2 different services, Service1 uses Auth-Type as "PAP" and Service2 uses "EAP" radcheck table +-----+----------+--------------------+----+--------------+ | id | username |…
Varun Taliyan
  • 26
  • 1
  • 7
1
vote
0 answers

Port security and active directory

I'm using RADIUS for port security in my environment on publicly accessible ports (meeting rooms, etc.) We have HP Procurve switches and Aruba Clearpass is handling the authentication requests (with Active Directory DCs on the back end). It's set…
NaOH
  • 411
  • 2
  • 10
  • 19
1
vote
1 answer

802.1x Wifi with Disabled AD Account

I have setup an NPS Server (Windows Server 2016) which uses RADIUS to allow my users to authenticate against AD for their Wireless Connections. When I disable an account in AD, NPS will not allow the user to authenticate and the connection fails.…
kccoers
  • 31
  • 3
1
vote
3 answers

Are Reversibly Encrypted Passwords safe, and Why isn't it working when enabled for a user?

In my event log, when my router tries to use Radius to authetnicate I get the following: """The user could not be authenticated using Challenge Handshake Authentication Protocol (CHAP). A reversibly encrypted password does not exist for…
Kyle Brandt
  • 83,619
  • 74
  • 305
  • 448
1
vote
0 answers

FreeRADIUS authentication using Active Directory

I am trying to implement RADIUS authentication using Active Directory. I want requests to RADIUS to be sent to AD server and RADIUS responds according to its result. I've already joined RADIUS server to domain, so I can do ntlm_auth --request-nt-key…
Tatyana
  • 41
  • 4
1
vote
1 answer

RADIUS/802.1x Latency Guidelines

We're considering a centralising our RADIUS infrastructure but I can't find any information about acceptable latency between the Authenticator (ie. switch or WLC) and the Authentication Server. Would 100ms roundtrip work well without issues, what…
Fowl
  • 406
  • 2
  • 5
  • 22
1
vote
0 answers

Server 2008 Radius stopped working

i've had a working 2008 Server with NPS as a Radius Server running for authentication of wifi devices, VPN Connections and Logins from Cisco devices. Suddenly the server stopped responding. - No errors in the Windows logs - NPS is listenning on the…
Terry2710
  • 11
  • 2
1
vote
0 answers

connecting Linux pppd to LDAP server to authenticate MSCHAPv2?

I need to provide a remote access VPN service. I'd like very much to use JumpCloud.com to do the user database management. I'm trying to achieve the following: Provide l2tp+ipsec VPN service to users, hosted on Ubuntu 14.04 on AWS. Mac OSX clients…
Capt. Crunch
  • 839
  • 2
  • 12
  • 25
1
vote
0 answers

Connecting Windows to Wireless (802.1x Radius) before login working sporadically

We have a system based on Ruckus wireless, connected to a Windows 2012R2 NPS server for RADIUS authentication. We've long been having issues whereby single sign-on isn't reliable, so we've set up a (hidden) SSID which uses machine authentication…
1
vote
0 answers

Apache radius auth works with firefox not with chrome

I am using mod_auth_radius with apache2.2 Here is the relevant config in the site section: AddRadiusAuth localhost:1812 test 5:3 AddRadiusCookieValid 5 AuthType…
martin24
  • 11
  • 1