freeradius

freeRadius 基础配置及测试

由 痴心易碎 提交于 2020-01-05 06:42:09
国内私募机构九鼎控股打造APP，来就送 20元现金领取地址： http://jdb.jiudingcapital.com/phone.html 内部邀请码： C8E245J （不写邀请码，没有现金送） 国内私募机构九鼎控股打造，九鼎投资是在全国股份转让系统挂牌的公众公司，股票代码为 430719 ，为 “ 中国 PE 第一股 ” ，市值超 1000 亿元。 ------------------------------------------------------------------------------------------------------------------------------------------------------------------ freeRadius 基础配置及测试 孤剑 http://blog.csdn.net/alonesword/ 安装完成以后就开始对freeradius服务端进行一些相应的设置 一、 启动 radius 服务 先以调试模式启动服务器（需要root用户权限），看看能不能正常运行radius服务程序 radiusd -X 确认radius服务程序能正常运行后，就要对服务程序进行一些设置并进行测试，确认其功能确实可用 （注：在这里可能出现错误见 常见问题 Q1，Q2） 二、 配置radius 服务 1. 添加测试用户

Add a VSA (Vendor Specific Attribute) to Access-Accept reply programmatically in FreeRADIUS C module

由 别来无恙 提交于 2020-01-02 07:06:19
问题 I have a FreeRADIUS C language module that implements MOD_AUTHENTICATE and MOD_AUTHORIZE methods for custom auth purpose. I need the ability to programmatically add VSAs to the Access-Accept reply. I have toyed a bit with radius_pair_create() and fr_pair_add() methods (see snippet below) but that didn’t yield any change to the reply content, possibly because I specified ad-hoc values that don’t exist in a vendor-specific dictionary. Or because I didn’t use them correctly. My FreeRADIUS

Add a VSA (Vendor Specific Attribute) to Access-Accept reply programmatically in FreeRADIUS C module

由 柔情痞子 提交于 2020-01-02 07:06:13
问题 I have a FreeRADIUS C language module that implements MOD_AUTHENTICATE and MOD_AUTHORIZE methods for custom auth purpose. I need the ability to programmatically add VSAs to the Access-Accept reply. I have toyed a bit with radius_pair_create() and fr_pair_add() methods (see snippet below) but that didn’t yield any change to the reply content, possibly because I specified ad-hoc values that don’t exist in a vendor-specific dictionary. Or because I didn’t use them correctly. My FreeRADIUS

CoovaChilli Authentication

由 守給你的承諾、 提交于 2019-12-24 10:39:35
问题 I'm trying to authenticate with CoovaChilli using Radiusd (FreeRADIUS v2.2.5) which is running on Ubuntu 14.04 and I can't succeed. CoovaChilli is using some different parameters beside to ChilliSpot. Based on it's own documentation, CoovaChili works with Auth: 0 or 1 Chillispot works with Accept or Reject. The problem is that I've tried both versions and I still cannot authenticate with radius. Do I have to modify anything in exec module ? I want to keep working both versions (chillispot,

FreeRadius 3.0.13 rlm_rest restful api authentication

由 允我心安 提交于 2019-12-22 00:03:24
问题 I'm trying to authenticate Radius Requests against Restful API. My Virtual Server configuration as below: authorize { filter_username filter_password preprocess auth_log if (User-Password) { update control { Auth-Type := rest } } } authenticate { rest } My radius -X output is: (0) Received Access-Request Id 202 from 127.0.0.2:10708 to 127.0.0.2:1812 length 73 (0) User-Name = "bob" (0) User-Password = "hello" (0) NAS-IP-Address = 127.0.0.2 (0) NAS-Port = 1 (0) Message-Authenticator =

FreeRADIUS authentication through Azure Active Directory

由 浪子不回头ぞ 提交于 2019-12-21 15:04:05
问题 I have just configured FreeRadius, but I would like to authenticate users which are in an Azure AD. I know it's possible to link FreeRADIUS with an Active Directory, but I can't find anything about Azure AD. Does anyone knows if it's possible? A possible solution could be to create an AD locally synchronized with the Azure AD, but I would like to do it directly. 回答1: I did it with a little difficulty. John Robert Mendoza is correct but there are a few gotchas. Here are my steps: Add AADDS and

how to configure FreeRADIUS to proxy the PAP request inside an EAP-TTLS tunnel

由 你说的曾经没有我的故事 提交于 2019-12-12 17:43:49
问题 how can I configure FreeRADIUS to proxy the PAP request inside an EAP-TTLS tunnel? Client sends a EAP-TTLS with PAP as inner protocol to freeradius server. I want to proxy the PAP request to another RADIUS server which understands only PAP. How could I configire freeradius for this. 回答1: Ensure in the eap module configuration proxy_tunneled_request_as_eap = no Configure your proxy realm in proxy.conf Set proxy realm in inner server update control { Proxy-To-Realm := <realm> } 回答2: Just

Freeradius Filter ID

由 家住魔仙堡 提交于 2019-12-12 06:44:35
问题 Would really appreciate some help or some hints for a Freeradius config to return the Filter ID value based on DN. I have two types of DN: DN: cn=UserA,ou=Value1,ou=People,dc=example,dc=com and DN: cn=UserB,ou=Value2,ou=People,dc=example,dc=com My aim is to have the Filter ID value to be Value1 or Value2 from the above examples Thank you 回答1: ldap if (&LDAP-UserDN =~ /^.*ou=([^=,]+),ou=People,dc=example,dc=com$/) { update reply { Filter-ID := "%{1}" } } You can use regex sub-capture groups to

FreeRadius Reading attributes while executing external script

由 喜夏-厌秋 提交于 2019-12-11 20:34:54
问题 Can someone give me a hint, how to modify Freeradius to read other attributes from an external script. I have this update control { Auth-Type := `/usr/bin/php -f /web/auth.php '%{NAS-Identifier} %{Calling-Station-Id}'` } But the reply right now can be only Access or Reject , but I would like to set also some attributes more like a bandwidth limitation to this user like output Accept WISPr-Bandwidth-Max-Up: xxx WISPr-Bandwidth-Max-Down: xxx WISPr-Redirection-URL: http://google.com I can

Freeradius: problems with Open Directory, no rlm_opendirectory.* existing

由 北战南征 提交于 2019-12-11 16:58:26
问题 Im trying to pass from macOS Server to FreeRADIUS and I am following Apple's macOS Server— Service Migration Guide | March 2018 When trying to configure FreeRadius I have to verify the existence of some files related to Open Directory $ ls /usr/local/lib/rlm_opendirectory. You should see the following in the output: rlm_opendirectory.a rlm_opendirectory.dylib rlm_opendirectory.la But nothing is there! Later in "Set up users" When Testing the setting through: $ sudo /usr/local/Cellar
订阅 freeradius