User Tools

Site Tools


radius_on_centos7

This is an old revision of the document!


FreeRadius on CentOS 7 with LDAP support

Installation

yum install freeradius-ldap freeradius-utils freeradius
cd /etc/raddb/mods-enabled/
ln -s ../mods-available/ldap

Configuration

LDAP

vi ldap

In the ldap section change the following fields. In my example I stall radius on the same machine as the ldap server so I am going to connect to localhost. The following config is not the complete config, only the changed part!

ldap {
        server = "localhost"
        port = 389
        identity = "cn=manager,dc=helux,dc=nl"
        password = mypass
        base_dn = "dc=helux,dc=nl"

        update {
                control:Password-With-Header    += 'userPassword'
                control:NT-Password             := 'SambaNTPassword'
        }
        user {
                access_attribute = "dialupAccess"
                access_positive = yes
        }
}

Clients

vi /etc/raddb/clients.conf
client private-network-1 {
	ipaddr		= 172.16.0.0/16
	secret		= testing123
}
client private-network-1-ipv6 {
	ipaddr		= 2a02:22a0:bbb7:400/56
	secret		= testing123
}

TLS

radius_on_centos7.1435155291.txt.gz · Last modified: by herwarth