Questions tagged [freeradius]

The FreeRADIUS project is an open source, multi-protocol (RADIUS, EAP, DHCP, BFD) policy server.  FreeRADIUS' primarily role is a AAA (Authentication, Authorization, and Accounting) server, but can also be used as part of an IPAM (IP Address Management) solution, and as an event distribution server.

The FreeRADIUS project, an open source implementation for the RADIUS, EAP, DHCP and BFD protocols.

The project includes a daemon implementing the above protocols, a BSD licensed RADIUS client library, a RADIUS PAM library, and an Apache module translating HTTP Basic-Authentication to RADIUS PAP authentication.

RADIUS, Remote Authentication Dial In User Service, is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

575 questions
3
votes
2 answers

Failed binding to auth address 127.0.0.1 port 18120 bound to server inner-tunnel: Address already in use

I have configure freeradius following this tutorial. But when I run a command "freeradius -X" I got the following error radiusd: Opening IP addresses and Ports #### listen { type = "auth" ipaddr = 127.0.0.1 port = 18120 Failed binding to auth…
3
votes
2 answers

Definition of RADIUS Vendor-Ids

Is there a central authority for the definition of Radius Vendor-Id's for Vendor Specific Attributes? How are Vendor ID's allocated? and who defines and distributes the dictionary files?
user2881914
  • 407
  • 1
  • 4
  • 9
3
votes
0 answers

How to use sqlcounter to disconnect a user after reaching the monthly quota?

I'm new to Freeradius. My NAS is StrongSwan and seems to be supporting CoA. I also have the sql accounting mod enabled, which allows me to count the octets. There are many tutorials about how to count the session time of a user and action a…
Houman
  • 64,245
  • 87
  • 278
  • 460
3
votes
1 answer

Laravel Radius Authentication

System is built onto: 1. Laravel 5.3 2. php70u 3. PHP PECL Radius Package https://pecl.php.net/package/radius All i want to do is 1. Authenticate users on my own server via custom-built laravel portal (centos 7) 2. And then log them onto FreeRadius…
saimcan
  • 1,706
  • 7
  • 32
  • 64
3
votes
0 answers

Reading a zlog (c logging library) log file with "tail -f" makes program run 4x faster

I have a bit of a strange problem with zlog. Let me just describe the application first. It's a freeradius module written in c which uses zlog as a logging library. The system is Linux mint 17.3 x64, ext4, kernel 3.19.0. Now when I use command tail…
ASu
  • 156
  • 1
  • 5
3
votes
1 answer

Freeradius and external script authentication with CHAP / MS-CHAP

I am using Freeradius to authenticate users via an external script as shown here, that returns Accept or Reject when passed a username and password pair. authorize{ update control { Auth-Type := `/usr/bin/php -f…
Pranab
  • 2,207
  • 5
  • 30
  • 50
3
votes
1 answer

Freeradius and Client Configuration?

I am using hostapd to create a hotspot in my laptop. I am using freeradius as my backend authentication server. I configured clients in freeradius as client 11.0.0.1 { secret=Somethingelse ipaddr=11.0.0.1 require_message_authenticator =…
Augustus Francis
  • 2,694
  • 4
  • 22
  • 32
3
votes
0 answers

setting a captive portal using freeradius + mysql + apache

can someone try to tell me the difficulty level of this kind of wifi captive portal setup. im knowledgeable in networking, not much in php/mysql but enough skills to setup my own webserver. and a 4/10 knowledge in radius. here's the scenario 1) a…
bobbyjones
  • 2,029
  • 9
  • 28
  • 47
3
votes
3 answers

Centralized Authentication Server OpenAM vs FreeRadius

The basic requirement is to centralize the authentication and authorization of multiple SaaS applications to ease development (each SaaS application using minimal code to authenticate against a single source) and when necessary provide SSO. The…
Nitin Sanghi
  • 31
  • 1
  • 3
2
votes
0 answers

Freeradius 3, Posgresql 14, application name

there is a configuration option in /etc/freeradius/3.0/mods-available/sql sql { postgresql { send_application_name = yes } which makes Freeradius use "application_name" parameter to connect to Postgresql. is there any way to change the value…
2
votes
1 answer

Limit connections per user using FreeRADIUS

I'm here because after a good time searching how to limit the simultaneous connections of a user with FreeRADIUS I haven't achieved it... My intention is that each user connects only once and that when they try to access again with that account, if…
2
votes
1 answer

TLS handshake on EAPOL 802.1X

I am building a EAP-TLS authentication client (802.1X EAPOL). The requirement thus far is just EAP-TLS. I am using the FreeRadius server to test against, and it is using TLS 1.1, so that is the transport version I'm developing to. Because this…
SpacemanScott
  • 953
  • 9
  • 21
2
votes
1 answer

TLS connection with freeradius and openssl

In first, sorry for my english, I'm a baguette man. I would like to make an EAP-TLS connection for wifi. I use freeradius for the authentification and Openssl for create certificates. So first I "create" a root-ca.key, then a root-ca.req and the a…
2
votes
0 answers

Authenticator cant resolve code from password

I am trying to implement 2FA for L2TP VPN but problem is that google authenticator cant resolve code from password (pass + OTP) which is MSCHAP2, I don't wanna change it on PAP because it is not secured. Is there any way to sent code over username…
2
votes
1 answer

FreeRADIUS Version 3.0.13 - Failed to find 'Auth-Type EAP' section

I trying to setting FreeRadius on my AWS Linux. It was working when I first set it up or atleast I was able to active it. However, after I reboot the Radius server and try to start it, I get the following error: /etc/raddb/mods-enabled/eap[14]:…
JamalS
  • 21
  • 1
  • 2
1
2
3
38 39