Fwd: How to configure RADIUS +LDAP using SASL/Certificate based binding instead of usernames and passwords

Hi, I am working on RADIUS with LDAP as backend for authenticating users. I configured rlm_ldap on RADIUS server with username and plaintext password and I am able to authenticate RADIUS client using LDAP. But I want to configure RADIUS server with certificates instead of using usernames and

RADIUS shared secret over internet

Hi, I have read on the archives regarding the above issue and that the RADIUS shared secret is an obfuscation method of securing the communications between the NAS and RADIUS Server. One method i have read is by using IPSec but i am asking around if there are other ideas that i may not have

Re: RADIUS shared secret over internet

Hi, RADSEC These days, the more proper answer is: RFC6614 http://tools.ietf.org/html/rfc6614 :-) Stefan -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel:

Re: RADIUS shared secret over internet

On Tue, Apr 9, 2013 at 2:52 PM, Muhammad Nuzaihan Kamal Luddin muham...@taqisystems.com wrote: Hi, I have read on the archives regarding the above issue and that the RADIUS shared secret is an obfuscation method of securing the communications between the NAS and RADIUS Server. One method i

Re: RADIUS shared secret over internet

Interesting method by using TLS. This is what i had in mind but couldn't find the answer. The only method i see is through proxying the requests, based on a whitepaper i read - if this is what RFC6614 may contain. What are the roadmap for this? Are there any initial work being done or

Re: RADIUS shared secret over internet

As I remmember, Alan mentioned that RADSEC will be implemented in freeRadius 3... On 9.4.2013 10:54, Muhammad Nuzaihan bin Kamal Luddin wrote: Interesting method by using TLS. This is what i had in mind but couldn't find the answer. The only method i see is through proxying the requests,

Server dosn't detect any requests except from localhost

Hello, I have a student project that I need a RADIUS server in it. I have access to two servers that I have to remotely connect to them (VPN required, of course two servers are on the same network and can see each other always), one is having windows server on it and another one has CentOS

Re: RADIUS shared secret over internet

Hi, As I remmember, Alan mentioned that RADSEC will be implemented in freeRadius 3... correct. you can try/test/run FR3 today from GIT but if you want to keep with FR2.x in the meantime you can always have a local proxy eg RadSecProxy which works fine with FR2.x (and each end can do

Re: MAC Address Auth

Hi, Am happy to say that i managed to have this work, tested and double tested and it works fine, However now the challenge i have to ensure that all my users at a domain say @ut3 are resquested to fullfil all the parameters on this 1st line, How do i ensure this one? eric@ut3 

Re: Fwd: How to configure RADIUS +LDAP using SASL/Certificate based binding instead of usernames and passwords

On 04/09/2013 03:44 AM, pramod kulkarni wrote: Hi, I am working on RADIUS with LDAP as backend for authenticating users. I configured rlm_ldap on RADIUS server with username and plaintext password and I am able to authenticate RADIUS client using LDAP. There is a difference between using LDAP

Re: Server dosn't detect any requests except from localhost

On 04/09/2013 05:21 AM, Saeed Zanderahimi wrote: Hello, I have a student project that I need a RADIUS server in it. I have access to two servers that I have to remotely connect to them (VPN required, of course two servers are on the same network and can see each other always), one is having

Re: Server dosn't detect any requests except from localhost

Saeed Zanderahimi wrote: Here is the problem: Whenever I send a request from a radius client (I tried some testers, and even radtest) to my freeRadius server I get time out, freeRadius is running in dubuging mode and I can see that it doesn't receive any request whether to accept or reject. I

RE: RADIUS shared secret over internet

Muhammad Nuzaihan wrote: What are the roadmap for this? Are there any initial work being done or proof-of-concept work on this? By looking at implementations of TLS (in combination of openssl/gnutls) on other protocols might be similar to this but i may be wrong (i have yet to read on the

Re: Server dosn't detect any requests except from localhost [SOLVED]

Thank you for your answers, I added my client IP address and 1812:1814 ports to the iptables config file and after saving and rebooting it works now :) Regards Saeed From: Alan DeKok al...@deployingradius.com To: Saeed Zanderahimi saeed...@yahoo.com;

Cellular Roaming Accounting

I have recently inherited working on a freeRadius on openSUSE server on a cellular implementation. I'll be upfront that my Linux skills are minimal and I know nothing about freeRadius. I don't know what version of freeRadius we are running I was afraid to run radiusd -v because the man page said

Re: Cellular Roaming Accounting

Gerry Gasca wrote: I have recently inherited working on a freeRadius on openSUSE server on a cellular implementation. I'll be upfront that my Linux skills are minimal and I know nothing about freeRadius. Posting here is a good start. I don't know what version of freeRadius we are running

Re: Fwd: How to configure RADIUS +LDAP using SASL/Certificate based binding instead of usernames and passwords

Thanks John for the reply. can I use EAP-TLS method of authentication with LDAP as backend datastore to check usernames and passwords. It would be like I bind to RADIUS server with EAP-TLS method using certificate and check usernames and passwords from LDAP server if yes on EAP-TLS can you

Freeradius + MySQL + Daloradius

I am trying to setup wireless authentication through my mikrotik router using freeradius with mysql and daloradius. I have the server setup and working, I can use NTradtest from my pc and I get Access-Accept messages in return with my cleartext user/password, username userclear password clear.