Questions tagged [freeradius]

The FreeRADIUS project is an open source, multi-protocol (RADIUS, EAP, DHCP, BFD) policy server.  FreeRADIUS' primarily role is a AAA (Authentication, Authorization, and Accounting) server, but can also be used as part of an IPAM (IP Address Management) solution, and as an event distribution server.

Filter by
Sorted by
Tagged with
0 votes
0 answers
12 views

Network device (Juniper) + FREERADIUS + 2FA

Using Juniper EX3400 switch and other vendor network devices. Installed freeradius and able to authenticate users. Want to do 2fa as 2nd level of protection using freeradius. Can anyone share the ...
viki info's user avatar
0 votes
0 answers
18 views

Freeradius : virtual server and multiple client with same ip address

This is my first time posting on StackOverflow, and I've only recently started working with FreeRADIUS. Without delving too deep into the specifics of my project, I'm facing challenges in setting up a ...
Emanuele Bruno's user avatar
-1 votes
0 answers
12 views

Freerafius custom module python

I have freeradius server version 3.0.26 (if it matters). I wrote my module in rlm_python, everything works, but it handles all requests in one thread and because of that I have max 7-10 packets. My ...
Давид Давтян's user avatar
0 votes
0 answers
23 views

Need to Setup Radius Server with Google Authenticator on Rocky 9 and Create Custom attribute for Different Network Devices

*#For Dell Switch Admin User *Testuser Cleartext-Password := "XXXXXX" Force10-avpair= "shell:role=sysadmin" *#For Dell Switch Operator User *Testuser1 Cleartext-Password :...
Hassan Ahmed's user avatar
0 votes
0 answers
18 views

radius configuring functions in policy.conf

I'm trying to configure for freeRadius v.2.1.12 some sql statements, following the suggestions for setting up lockout statements here- https://wiki.freeradius.org/guide/lockout . I am putting a ...
Ann Cantelow's user avatar
0 votes
0 answers
16 views

How to set up 2FA using LinOTP and FreeRadius on Linux (RHEL 8)

I need to set up 2FA for user login methods to VMs (i.e. SSH, RDP..etc) and would need to do this using LinOTP with auth module FreeRaduis. Can you please guide me how to set up LinOTP on RHEL machine ...
Manish's user avatar
  • 23
1 vote
1 answer
79 views

FreeRadius 3.0 simple installation test fails

I install FreeRadius v 3.0.20 on Linux (F38 and Ubuntu 20.4) from their respective s/w repositories (dnf, apt) but cannot make the simplest self-test with username and password work. The procedure ...
ddbug's user avatar
  • 1,412
0 votes
0 answers
24 views

FreeRadius - SQL MAC Address Verification in Users file

I am attempting to set up freeradius in the following way: User: jsmith Group: technology User: msmith Group: hs-teachers Each user is permitted to use a school-owned device and a BYOD device. If ...
Cory Robbins's user avatar
1 vote
0 answers
46 views

FreeRADIUS Certificate chain untrusted

I've got installed freeradius on different vm's debian/ubuntu/rocky and on all of them i get these types of warnings in debug output: Certificate chain - 1 cert(s) untrusted (TLS) untrusted ...
maciegpttest's user avatar
0 votes
0 answers
104 views

Freeradius + daloradius privileges not working when connecting to huawei

I configured freeradius with daloradius and mariadb, I log in to the huawei s6730 device. Authorization passes but privileges level 15 are not assigned. At the same time, the freeradius report shows ...
kronsher's user avatar
-1 votes
1 answer
72 views

Error restarting FreeRADIUS service / "${dialect}" not found

everyone. I'm trying to configure Radius on Debian 12 to control access to some Extreme Networks switches. I'm new to the operating system and Radius. First, I created the database as follows. CREATE ...
AlanConker's user avatar
0 votes
0 answers
35 views

How can I implement 2-factor authentication in FreeRADIUS?

I have successfully performed an ID/PW authentication test using FreeRADIUS's PAP. When I receive ID/PW and OTP as a request from the client, I want to first authenticate the ID/PW using PAP. If the ...
Yesora Choi's user avatar
0 votes
0 answers
13 views

How to re-enable internet access after sending an AccessReject in a RADIUS server?

I'm working with a RADIUS server that's linked to a control device. I have the ability to deny Internet access by sending an AccessReject to the control device. The issue I face is after denying ...
mostafa amin's user avatar
0 votes
1 answer
55 views

FreeRadius Accounting Run Script

I am trying to run a script on FreeRadius on accounting when if condition is fulfilled, accounting { update control { ...omitted... update request { Tmp-String-5 := `/path/...
Mindf's user avatar
  • 13
0 votes
0 answers
29 views

SoftEther and radius auth failed even if radius responds ok

Have a very specific issue. server in radius is registered properly, firewall on vpn server is empty ( no blocks), freeradius responds to auth request with login ok but softehter fails with auth ...
Alberto Valejo's user avatar
0 votes
1 answer
16 views

How to increase the Octets capacity in FreeRADIUS

I am trying to increase the limits of "Acct-Input-Octets" and "Acct-Output-Octets" in freeRADIUS beyond 4,294,967,295, but I cannot. One of the reasons I come across is that in ...
sajeyks mwangi's user avatar
0 votes
0 answers
18 views

Is it possible to enable Apache Cassandra DB on Freeradius v3.2.x or v4.x is a must?

Due to performance requirements, we are trying to implement Cassandra DB with FreeRadius and enable sql accounting. For this, we installed the stable version of FreeRadius 3.2.x following the ...
Ibrahim Al Mahfooz's user avatar
0 votes
0 answers
25 views

How to add update delete edit pppoe login in freeRadius server with php

Hi all Please help me about this problem I want to send queries to freeradius server which I want to create a new pppoe login and update Delete edit I want that how to do it using Rlm api I wrote ...
Hafiz Alizade's user avatar
0 votes
0 answers
45 views

eap-peap x eap-tls - cerfiticate freeradius authentication

I have a client that manages its network and internet link. Today we do security through MAC ADDRESS blocking which generates a lot of wear and tear. The company's machines have their own certificate ...
Sanzio Fernando's user avatar
0 votes
0 answers
19 views

Looking for a way to create a batch of realm that points to the same home server pool in the proxy

I'm looking for the method to have a group of multiple users (realm) to be proxied to a specific radius server. Example in the proxy.conf: realm a auth_pool = radius_server_pool1 realm b ...
ltr_38's user avatar
  • 1
0 votes
0 answers
36 views

Creating and using a Bash script and a module in FreeRADIUS

I have a problem with my FreeRADIUS code. I have a script script_recherche_info.sh: #!/bin/bash username=$1 if grep -q -w "$username" "/fichiers_radius/info.txt"; then exit 1 ...
Hyakki's user avatar
  • 1
0 votes
0 answers
20 views

How do i forward input value to freeradius?

I have a form page which has username login option and i want to add email login option as well. I use freeradius server for authorization. Login with username works fine username field goes as ...
itsesc's user avatar
  • 31
0 votes
0 answers
37 views

Linotp radius module chap

I installed linotp with radius module. I can't login using chap and mschap. Only pap works. cat /etc/freeradius/3.0/sites-enabled/linotp server linotp { listen { ipaddr = * port = 1812 ...
student of Mgy's user avatar
0 votes
0 answers
16 views

Hi I am looking for latest rlm_verify.so file from IBM which is compatible with the latest linux and Freeradius servers

Below is the error freeradius is throwing up on start. Failed loading module rlm_verify from file /usr/lib64/freeradius/rlm_verify.so", "/etc/raddb/mods-enabled/verify[1]: Application and ...
kalyan's user avatar
  • 1
0 votes
1 answer
109 views

Radius server configured and local radtest returned success, but radtest from another server is not working

I am working on VPN project and wants to add a Radius server to manage the user authentication. I configured the Radius server and was able to radtest it successfully on the local machine Here is the ...
Toufic Sleiman's user avatar
0 votes
0 answers
40 views

Adding custom module to freeradius v3.0.x

I'm trying to add a custom modules to "freeradius-server" - version v3.0.x I have folder named "rlm_custom" with files named "all.mk" and "rlm_custom.c", I put ...
Rommel Aquino Mendiola's user avatar
0 votes
0 answers
92 views

freeradius azure ad domain services ldaps

I am trying to configure freeradius to authenticate using Azure AD Domain services with ldaps. I can connect to addds and an ldapwhoami successfully authenticates a user. Radtest with the same user ...
nigelhamden's user avatar
0 votes
0 answers
155 views

FreeRADIUS + AWS NLB Ignoring new connection due to client max_connections (16)

I am currently facing an issue while configuring the AWS Network Load Balancer health check in FreeRADIUS. I would appreciate some guidance and assistance regarding this matter. To provide some ...
luthfimasruri's user avatar
0 votes
0 answers
34 views

How can I adjust the timeout period in Freeradius Proxy?

Firewall > Freeradius > Auth server Freeradius is configured to proxy requests. If it does not get response in 14 seconds from auth server then it times out and sends login failure back to the ...
Raido's user avatar
  • 1
0 votes
0 answers
64 views

WPA2Enterprise - Freeradius<>Okta via LDAP (Aruba AP 505 )

Currently working on WiFi security project and one of the tasks is to run the WPA2 Enterprise for corporate network. We use Okta as an IDP, thought that the easiest way would be to set up Freeradius ...
dawid_w's user avatar
0 votes
0 answers
142 views

Freeradius 3, OpenLDAP Cisco AV Pair

Migrating from Freeradius 1.x to 3.2 The user database is on OpenLDAP and the radius server is used to authenticate shell login to Cisco and other network devices. It's not for WiFi or EAP ...
Emilio P's user avatar
0 votes
0 answers
62 views

freeradius (v3.0.21) ignoring accounting requests

I have installed a new freeradius (3.0.21) in a Debian 11 server. Trying to get it to work with OpenVPN now. I see this in debug (-X) mode (0) Login OK: [user/password] (from client vpn.domain.com ...
Alexander Kolodziej's user avatar
0 votes
0 answers
58 views

FreeRadius - CERTIFICATE client

I have a client that manages its network and internet link. Today we do security through MAC ADDRESS blocking which generates a lot of wear and tear. The company's machines have their own certificate ...
Sanzio Fernando's user avatar
0 votes
1 answer
541 views

No Auth-Type found: rejecting the user via Post-Auth-Type = Reject

I am trying to run freeradius with command: freeradius -f -Xx -i 0.0.0.0 -p 1812 -d /etc/freeradius/3.0 but I am gegtting the error ERROR: (2) No Auth-Type found: rejecting the user via Post-Auth-...
MecaTheclau's user avatar
0 votes
0 answers
44 views

Freeradius 3.0 with two mysql

i have two database servers with one ip each. Does anyone know how I can do in freeradius 3.0 to pull a main database server, and if it goes down, to pull another one? I've managed to pull both, but ...
Raúl's user avatar
  • 1
0 votes
0 answers
204 views

Simultaneous Use setup. Subsequent request from same user only trigger Accounting-Request not Access-Request

I am running a virtual setup on GNS3 trying to get everything setup correctly before we implement the new changes to the live environment. In GNS3 I am running a CHR with ROS v6.48. I have FreeRADIUS ...
Karl Keim's user avatar
0 votes
1 answer
271 views

Cannot get specific vendor attribute using radius EAP-ttls

I am new to radius and EAP. I fail to retrieve vendor specific attributes from a freeradius server using radius and EAP-TTLS (when performing PAP, user's attributes are well returned by the server). I ...
Umaiki's user avatar
  • 354
0 votes
1 answer
66 views

Why is FreeRadius' dictionary.rfc2865 txt value for Service-Type 6 (Administrative-User) different frm published rfc2865 txt value "Administrative"?

As in the subject/question above, I'm seeing a different value between FreeRadius' dictionary.rfc2865 and the actual published rfc2865. In the published RFC 2865, the text for the Service-Type value ...
rwr's user avatar
  • 3
0 votes
1 answer
361 views

Default user profile in Freeradius - How to get it to query only incoming requests that don't match a user instead of all users

So I have a setup running Freeradius 3.0 on Ubuntu 22.04 with MariaDB SQL and Daloradius web interface. Anyhow I want to setup a default user setting to authenticate users who do not have an account ...
Karl Keim's user avatar
0 votes
0 answers
81 views

freeradius unknown attribute error with EAP-AKA

I was trying to configure EAP-AKA in freeradius server (radiusd version 4.0, compiled from source) to test with strongswan. However, radius daemon is not getting started and showing unknown attribute ...
Subhajit's user avatar
1 vote
0 answers
31 views

freeradius apache2/php authorization - ubuntu 5.15

my situation: I have two severs, a apache2 webserver and a freeradius-server. The webserver does authenticates himself against the radius. For this, I use the libapache2-mod-auth-radius packet. Now ...
Alphabeit's user avatar
0 votes
0 answers
59 views

FreeRADIUS Version 3.0.25, for host x86_64-suse-linux-gnu - missing log both in details and linelog

The logline and details module don't log all incoming requests. Hi. I'm working with FreeRADIUS Version 3.0.25, for host x86_64-suse-linux-gnu. For the first time, I need to rely on FR native ...
Giuliano De Paolis's user avatar
0 votes
1 answer
103 views

Is FreeRaduis for Windows still available?

Is FreeRaduis for Windows still available ? I have followed links from several sites, but all seem to be dead or lead nowhere. The download page does not seem to offer the Windows version.
mabb2023's user avatar
0 votes
1 answer
261 views

Unable to run "radiusd -X" command on Debian 10

I have FreeRadius server installed on Debian 10, and i am trying to run it in debug mode. However, when i enter the "radiusd -X" command, i get "command not found". Can you assist ...
Michael Mallo's user avatar
0 votes
1 answer
47 views

[FREERADIUS - Conf/Logging]

Is there a specific configuration on FreeRadius to set up the rate of the production of the file.log ? Please could you share the configuration for the logging? Thanks a lot for your support ...
Carola Savinetti's user avatar
0 votes
1 answer
801 views

EAP-TLS with Android 11 and Freeradius 3 Failing

I've been dealing with this issue for around a month now and wanted to see if anyone has any ideas about this. I am trying to enable EAP-TLS authentication on our Android 11 devices using a Freeradius ...
Or benet's user avatar
-1 votes
1 answer
209 views

I am a novice in free radius, how can I get the user's password?

I want to do Wi-Fi authentication through radius. The password is encrypted and stored. I wrote a password-encrypted script, but the verification still fails. I checked and found that the password was ...
shier's user avatar
  • 1
0 votes
0 answers
80 views

Running Freeradius (both 3.0.21 & 3.2 on different hosts) and getting talloc errors & the freeradius service crashing

Pretty sure there's a eap client out there that's causing this, but am unsure how to identify it. Running freeradius -X interactively it will not crash. It only crashes when running in daemon mode. ...
Dael Sutton's user avatar
0 votes
0 answers
141 views

How to check the Extended Key Usage in freeradius?

I'm configuring a freeradius server for authenticating Wifi clients with EAP-TLS. The solution should check certificates with EAP-TLS and everything is working fine, but checking the "extended ...
Dan's user avatar
  • 33
0 votes
0 answers
97 views

Freeradius custom LDAP attribute [Google LDAP]

I have freeradius configured to work with Google SecureLdap. I configured also cache auth and works well. Hovewer I have problem to retrieve a custom attribute (created in LDAP Google Directory) Could ...
cadei's user avatar
  • 1

1
2 3 4 5
12