Questions tagged [freeradius]

FreeRADIUS is an open source RADIUS server

FreeRADIUS is an open source RADIUS (Remote Authentication Dial-In User Service) server. It implements AAA: Authentication, Authorization, and Accounting. It is very flexible and has many modules. It supports many backend databases such MySQL, PostgreSQL or Redis for retrieving/saving AAA data.

Official website.

261 questions
0
votes
0 answers

How can Freeradius assign a VLAN ID to the device behing the IP phone

I am able to authenticate the IP phone but the pc port through which the users get to the LAN do not get assigned.I observed the pc is being dropped into the same vlan as the phone.The Lan USERs are set up to authenticate withe the active…
0
votes
2 answers

Can radius be configured to assign ip addresses?

I would need to know if a radius server can be configured in such a way that it allows to assign a specific ip address to a device when it connects. I mean, when a mobile device connects to the wifi network issued by an access point and…
user3105
  • 11
  • 5
0
votes
1 answer

FreeRADIUS - Can a username be altered?

Is there a way to alter a username before it before FreeRADIUS proxy it? Example, you have the username "abcuser@abc.com" coming to the FreeRADIUS server, the FreeRADIUS server changes the username to "123user@abc.com" and proxy it to the defined…
0
votes
0 answers

Wireless EAP / Freeradius, is there a way to check Mac Address in LDAP?

So we have EAP-PEAP over MSCHAP working. What I'd like to do is have a MAC Address check, for the purpose of making sure people aren't putting their credentials into random devices. I know SCEP would be the better option here, but this is where…
0
votes
1 answer

How to setup a proxy radius server (FreeRadius 3)

I am trying to setup a proxy Freeradius server that forwards all requests to another Freeradius server. For reference see the following picture: The reason for this setup is I want users to be to onnect to the local LAN via VPN, but the local site…
0
votes
1 answer

How can Freeradius assign a VLAN ID to the authenticated client?

I am using Freeradius to authenticate users in PEAP-GTC and I want it to give a VLAN ID to the authenticator which will be assigned to the port of the authenticated client. The authenticator is already configured to assign the VLAN ID recieved by…
molik
  • 69
  • 1
  • 9
0
votes
0 answers

Client hostname attribute in radius request

I am now trying to run logging of accounting information into my database. I use FreeRadius. I have read at glance a few RFC for radius accounting and authentication, so I expect that it is not possible, but I want to ask. Is there any attribute for…
0
votes
1 answer

keepalived - "notifiy_master"/ "notify_backup" does not start/stop application

I want to start/stop a freeradius depending on the master (start) or the backup (stop) state of the keepalived instance. The freeradius is listening for accounting messages on the shared virtual ip. I tried to reach this with notify_master and…
ryudo
  • 1
0
votes
0 answers

Issue setting up freeradius, Google LDAP and Unifi Controllers

I'm trying to use freeradius as a radius server that uses Google's LDAP for a directory, for Unifi USG4's VPN. When I don't use CHAP / MSCHAPv2, it works fine! However, MSCHAPv2 is required. When using MSCHAPv2, I get this from freeradius: Auth: (4)…
Chemdream
  • 83
  • 1
  • 8
0
votes
0 answers

FreeRadius 3 + sqlippool

I have a basic configured FreeRadius in conjunction with Postgresql and Mikrotik. The SQL module is configured correctly and PPPoE authorization through the database works. I need to connect and configure the sqlippool module. At this point, I have…
0
votes
0 answers

freeradius and configure eap or pap with rest

free radius and configure eap or pap with rest i want use strongswan with free radius and rest module, i see sql and eap work together, how can configure eap with rest ? the important part is strongswan not send password to radius server. server os…
0
votes
0 answers

how conncet ibsng as redius server to strongswan

I want to use ibsng (on centos 6) as a Radius server and manage my strongswan accounts (on centos 7). https://wiki.strongswan.org/projects/strongswan/wiki/EapRadius I made these settings and set up the IP server and secret. ibsng (centos…
0
votes
1 answer

how to send log from post-auth with Freeradius?

I want to send message to remote syslog in post-auth section. Simple string with "'%{User-Name}', '%{reply:Packet-Type}', '%{Calling-Station-Id}'" How do it with FreeRADIUS 3 ? Or.. How to split loggs by facility or priority?
eri
  • 274
  • 2
  • 4
  • 15
0
votes
1 answer

FreeRADIUS3 - ERROR: Failed parsing output from exec, expecting operator

FreeRADIUS 3 for OTP authentication, authentication succeeds, however FreeRADIUS fails to parse the response. Sending the test command and monitoring the debug output (radiusd -X), there is an error as shown below, where the output is not parsed…
-1
votes
1 answer

more than one freeradius user and database

I want to make free radius managing system. there are many users who can use this system. every user will have his own database. for example, I have tow users the first one admin1 and the second admin2 the first user will have database1 and the…
1 2 3
17
18