User Tools

Site Tools

Trace: • radius_on_centos7
radius_on_centos7

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
radius_on_centos7 [2017/09/16 12:36] – herwarthradius_on_centos7 [2018/02/26 21:36] (current) – [Update to CentOS 7.4] herwarth
Line 24: Line 24:
                 control:Password-With-Header    += 'userPassword'                 control:Password-With-Header    += 'userPassword'
                 control:NT-Password             := 'SambaNTPassword'                 control:NT-Password             := 'SambaNTPassword'
 +                reply:Reply-Message             := 'radiusReplyMessage'
 +                reply:Tunnel-Type               := 'radiusTunnelType'
 +                reply:Tunnel-Medium-Type        := 'radiusTunnelMediumType'
 +                reply:Tunnel-Private-Group-ID   := 'radiusTunnelPrivategroupId'
         }         }
         user {         user {
Line 76: Line 80:
   radtest <USERNAME> <SECRET> localhost 2 testing123   radtest <USERNAME> <SECRET> localhost 2 testing123
 Query user for WPA enterprise: Query user for WPA enterprise:
-  ./rad_eap_test -H localhost -P 1812 -S testing123 -u <USERNAME> -p <SECRET> -m WPA-EAP -e PEAP -2 MSCHAP+  ./rad_eap_test -H localhost -P 1812 -S testing123 -u <USERNAME> -p <SECRET> -m WPA-EAP -e PEAP -2 MSCHAPV2
   ./rad_eap_test -H localhost -P 1812 -S testing123 -u <USERNAME> -p <SECRET> -m WPA-EAP -e TTLS -2 PAP   ./rad_eap_test -H localhost -P 1812 -S testing123 -u <USERNAME> -p <SECRET> -m WPA-EAP -e TTLS -2 PAP
 =====Update to CentOS 7.4===== =====Update to CentOS 7.4=====
 The upgrade to CentOS 7.4 breaks FreeRadius with LDAP. I discovered some errors with dots (.) in the username. So I altered the filter file in /etc/raddb/policy.d The upgrade to CentOS 7.4 breaks FreeRadius with LDAP. I discovered some errors with dots (.) in the username. So I altered the filter file in /etc/raddb/policy.d
  
 +THIS CODE IS OBSOLETE
 <code - /etc/raddb/policy.d/filter> <code - /etc/raddb/policy.d/filter>
 . .
Line 100: Line 105:
 #               } #               }
 . .
 +.
 +.
 +</code>
 +===== Peap config change for radius assigned VLAN ====
 +<code - /etc/raddb/mods-available/eap>
 +.
 +.
 +peap {
 +.
 +.
 +                use_tunneled_reply = yes
 . .
 . .
 </code> </code>
 {{tag>centos}} {{tag>centos}}
radius_on_centos7.1505565393.txt.gz · Last modified: by herwarth

Page Tools

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki