Questions tagged [freeradius]

FreeRADIUS is an open source RADIUS server

FreeRADIUS is an open source RADIUS (Remote Authentication Dial-In User Service) server. It implements AAA: Authentication, Authorization, and Accounting. It is very flexible and has many modules. It supports many backend databases such MySQL, PostgreSQL or Redis for retrieving/saving AAA data.

Official website.

261 questions
0
votes
1 answer

Configuring a RADIUS server for 802.1x over a Cisco Switch

I am trying to set up RADIUS authentication over a Cisco switch and I have gone through every tutorial they have. I am able to get the RADIUS server to authenticate when I access the CLI of the Cisco switch, but I am not sure which setting to change…
Alex
  • 11
  • 3
0
votes
2 answers

Syntax of mac2vlan file in freeradius?

Below is the content of mac2vlan file in freeradius. When I uncomment this line 00:01:02:03:04:05,VLAN1 it logs a parsing error including configuration file /etc/raddb/modules/mac2vlan /etc/raddb/modules/mac2vlan[10]: Parse error after…
Edik Mkoyan
  • 115
  • 5
0
votes
1 answer

Configuring dhcp module in FreeRadius (3.0.2 - Centos 6.5)

I am using the REST module to authorise a DHCP request. I would like to send an explicit DHCP NAK if the authorisation fails, however the DHCP module seems to return immediately if there is a failure and just ignores the DHCP request without any…
mixja
  • 197
  • 2
  • 7
0
votes
2 answers

RADIUS-sever: Hashing password before checking

I do have to set up a RADIUS server for authentication with a captive portal of pfSense. Unfortunately, all passwords in the RADIUS' database are hashed with a certain algorithm. I do use a MySQL-database. Since the user are submitting their…
Drudge
  • 125
  • 2
  • 10
0
votes
1 answer

FreeRADIUS clients to access service with username and password with access periods

I am using freeradius/mysql/daloradius. I need my customers to be able to login using a username and password that they signed up with and at the same time give them different access periods. How do I accomplish that? I've attempted editing…
philip
  • 1
  • 1
0
votes
1 answer

Authenticate Radius user using pam and ssh

I am able to authenticate radius users using radius server+pam+ssh with creating local user with blank password in linux. Is it possible to authenticate radius users without creating users in local machine with blank password? /etc/pam.d/ssh file as…
user3184706
  • 110
  • 1
  • 2
  • 10
0
votes
1 answer

Freeradius my custom module to set Framed-IP-Address

I got a complicated schema where my radius server needs to send the Framed-IP-Address based on the results of a redis-db query so, I would like to know if if the post-auth part of my default config I can do that. Something like (or any other…
Romeo Mihalcea
  • 502
  • 1
  • 6
  • 24
0
votes
2 answers

Multiple NAS-IP-Address check attributes in FreeRadius?

is it possible to have an OR statement in freeradius check attributes? I have say 10 VPN servers that authenticate from freeradius. Most users can access all servers but I have a demo user that can only access 2 of those servers. I can set this up…
user1167223
  • 151
  • 5
  • 15
0
votes
1 answer

freeradius radacct update occurs after another connection establishment

sorry for my bad english.i connect via openvpn from my win7 client to freeradius server that is in the ubuntu os.my external database for authentication is ldap.i use mysql for freeradius accounting information.when user connected to freeradius…
Bahareh
  • 1
  • 3
0
votes
1 answer

freeradius radacct update does not occur immediately

I use freeradius and ldap and openvpn in my project. when user disconnect from openvpn,radacct table does not update. I need that acctstoptime updated immediately. please guide me.
Bahareh
  • 1
  • 3
0
votes
2 answers

What is the best methodology for managing backups of configuration files on unix/linux systems?

Hey Serverfault community, So what are the best practices for managing backups of various configuration files on a production unix/linux systems? for example, (and why I am asking). I am part of a team managing some production radius…
bobloblaw
  • 5
  • 1
  • 3
0
votes
1 answer

WPA2 enterprise: username/password-prompt-less setup on a mixed network: XP/SP3, Mac OS X, Linux, iOS

I asked a question recently about setting up WPA2 enterprise, and I have a couple of ancillary questions. First, regarding the use of the OpenSSL cnf files for the certificate generation. I have a number of them in /etc/raddb/certs, which came in…
Sonny
  • 183
  • 1
  • 8
0
votes
1 answer

coovachilli + freeradius, how to check how many users are currently login?

I installed CoovaChilli (AC) + freeradius in Ubuntu 10.10 successfully. How could I check how many user has already login and still remain active ?
Cthoong
  • 1
  • 1
0
votes
1 answer

Radius Authorization against ActiveDirectory and the users file

I have a problem with my freeradius server configuration. I want to be able to authenticate users against Windows ActiveDirectory (2008 R2) and the users file, because some of my co-workers are not listed in AD. We use the freeradius server to…
mohrphium
  • 615
  • 2
  • 9
  • 16
0
votes
1 answer

freeradius address assignment from ippool

I'm trying to figure out how to assign IP addresses from an ippool to mobile units. Ideally, I would like a unit to receive the same IP at each request. There is no data source to use to populate static entries for each unit, so I would prefer each…
Bittrance
  • 2,970
  • 2
  • 21
  • 27