Questions tagged [freeradius]

FreeRADIUS is an open source RADIUS server

FreeRADIUS is an open source RADIUS (Remote Authentication Dial-In User Service) server. It implements AAA: Authentication, Authorization, and Accounting. It is very flexible and has many modules. It supports many backend databases such MySQL, PostgreSQL or Redis for retrieving/saving AAA data.

Official website.

261 questions
0
votes
1 answer

What does the FreeRADIUS error "SSL says error 25 : path length constraint exceeded" mean?

I am testing the WLAN functionalities of a device connecting to a RADIUS server. This RADIUS server is located on a Raspberry Pi with Raspbian Stretch and is using FreeRADIUS 3.0 and Hostapd. Some of the EAP-TLS test cases check what happens if long…
0
votes
1 answer

Missing raddb folder

Various tutorials on setting up a freeRADIUS server refers to the eap.conf file in the /etc/raddb folder. However when i install freeRADIUS on my ubuntu server, the eap.conf file are found in /etc/freeradius. Is there a difference on the two…
Morten
  • 103
  • 1
  • 4
0
votes
1 answer

Freeradius: Clients.conf and CoA

I am on Freeradius 3.0.15 When i add my client (NAS IP) in clients.conf my configuration of the CoA is perfect, working fine without any problem. The issue is my clients list should come from the database but not this file. I add the client in my…
0
votes
1 answer

proxy.conf file in freeradius

I am working on free radius management System which I developing it with PHP language. my system will be available on the cloud, suppose there are company1 and company2 which will use our system. company1 will have database1 which will contain…
M.Bwe
  • 3
  • 3
0
votes
1 answer

How to clone and restore FreeRadius setup in another server?

I have an up and running Freeradius instance in Ubuntu server with several configuration changes. Is there a standard way of cloning this radius server to another server with same configurations. My current idea is to install Freeradius to the…
Channa
  • 101
  • 1
0
votes
1 answer

Freeradius radclient unsupported attribute

I want to send disconnect-message to NAS using radclient program but when I want to disconnect one user using this command echo user-name=zaib | radclient -x 192.168.3.1 disconnect "muh" the debug mod show this error rad_recv: Disconnect-NAK…
0
votes
1 answer

CentOS & Free-Radius (dummy/tests works but not ssh) <> Cisco-ISR

Because I see some deme/dummy tests, I assume CentOS-7's free-radius is working correctly, but something wrong on ISR 2921. 2921 has IP of 10.20.30.1 on subinterface vlan 888. Free-Radius has IP of 10.20.30.100 on vlan 888. Still can't ssh with…
user192756
0
votes
1 answer

Configuring rlm_rest module in FreeRadius for accounting

I'm upgrading from FreeRadius 2 to FreeRadius 3 and changing some integration point from sql to rest module. Actually, I have two accounting points: accounting_start_query and accounting_start_query, which are calls to procedures. Now, I need to…
0
votes
1 answer

Is there any way to list all the attributes in unlang of FreeRadius?

I'm attempting to make some authorization logic by unlang in the the post-auth section of my FreeRadius server. I'm wondering if there is a way to show all the attributes I could access in my unlang code?
jayatubi
  • 113
  • 1
  • 6
0
votes
1 answer

Client Certificate Authentication Apache 2.2

I have a web server run by Apache 2.2 on my Debian Linux. I have a root and intermediate CA within Apache. The intermediate CA created my web server cert, as well as client certs. I would like to use the client certificate's CN as the username when…
alexs973
  • 51
  • 1
  • 6
0
votes
0 answers

Log into RADIUS Using Only Client Certificates

I'm using freeRadius on my over Apache on my Linux Debian machine. I've been going through my configurations for hours and I can't seem to get this to work. I'm able to log into radius using a username and password stored on MySQL, but now I want to…
alexs973
  • 51
  • 1
  • 6
0
votes
1 answer

freeradius can't find libpython2.7.so

I'm following the steps @freeradius.org to enable python. After the initial round of changes, I start the server and get this amongst the startup chatter: Failed loading libpython symbols into global symbol table: libpython2.7.so: cannot open shared…
Hugh Buntu
  • 109
  • 4
0
votes
0 answers

Using FreeRADIUS to filter accounting packets before forwarding

I am trying to see if it is possible to use FreeRADIUS to filter certain request types before forwarding the request on to its final destination. I have the following topology for RADIUS accounting packets. WAP -> Aruba Clearpass (RADIUS Server) ->…
Littlejon
  • 243
  • 1
  • 3
  • 9
0
votes
1 answer

CentOS 6 ssh is not prompting for the verification code?

I have installed the pam radius rpm package, and successfully configured /etc/pam.d/sshd, /etc/ssh/sshd_config, & /etc/pam_radius.conf. I know it is working, as i am getting a push notification to my handheld device after i enter my password. When I…
Winn
  • 31
  • 2
0
votes
1 answer

freeradius gives "no shared cipher" for windows 10 client

I have a working configuration of 802.1X authentification on my switch. The radius server is a freeradius instance with EAP-TLS configured. Everything works fine on linux (and android devices), but when I try to hook up a windows 10 pc I'm getting a…
Alexander Sergeyev
  • 253
  • 1
  • 2
  • 10