March 2015 - Freeradius-Users - lists.freeradius.org

Re: Publishing an EAP-TLS WPA2 Enterprise Setup Guide on the Wiki (Jasvinder S. Bahra)
by Rui Ribeiro 17 May '15

17 May '15

Hi Jasvinder, iPhone configurator has been indeed deprecated some while ago. It sort half worked in iOS 7, and it finally stopped being useful in iOS 8. At the moment, only XCode is useful for that. Apple configurator is used in a corporate setting, however last time I checked, it was only supported in a handful of countries, and not here in Portugal. Someone more used to it can comment. As for the profiles, we are generating them with cat.eduroam.org, because we are a university. However you also have available the service for free at https://802.1x-config.org for a corporate setting. Nevertheless, the profiles are essentially text files. So after generating the first, you can keep it. I also believe you can download client certificates never tried it. You just have to be aware that to download profiles or certificates you have to use the native Safari and not other browser. I also wrote a tutorial to the Portuguese federation on implementing FR 2+EAP-TTLS+AD, that I will have to update to FR 3 and make a little more presentable to distribute it widely. Feel free to contact me if you need more ideas about the Apple profiles. Regards, Rui Ribeiro -- Rui Ribeiro Senior Sysadm ISCTE-IUL https://www.linkedin.com/pub/rui-ribeiro/16/ab8/434 > Message: 2 > Date: Sat, 3 Jan 2015 10:30:37 -0000 > From: "Jasvinder S. Bahra" <bbdl21548(a)blueyonder.co.uk> > To: "FreeRadius users mailing list" > <freeradius-users(a)lists.freeradius.org> > Subject: Re: Publishing an EAP-TLS WPA2 Enterprise Setup Guide on the > Wiki > Message-ID: <1C37CF3272EE4702B874E462A92A49A6@atlantis> > Content-Type: text/plain; format=flowed; charset="iso-8859-1"; > reply-type=original > > Everyone, > > It looks like I posted too soon. > > My guide describes how to configure windows and android clients to connect > to a WPA2 Enterprise wifi network. > > I had done some research into getting apple devices onto it, and I believed > I had all the information necessary to get ipad's, iphone's and ipod's etc > onto the network. However, when I sat down to actually do so, I hit > something of a brick wall. > > I believed all I needed to do was download a PC application from the apple > website called the iPhone Configuration Utility (or iPCU), and use it to > create a profile which configured the relevant devices wifi connection > settings. > > It seems however, that the software has been deprecated - it hasn't been > updated in years. I can find no reference to it on the apple website. It > seems to have been replaced by an application named Configurator - which is > only available for mac's. > > Does anyone know of a way to configure ipad's, iphone's and ipod's wifi > settings, without tools such as iPCU or Configurator? > > Regards, > > Jazz > > > > ------------------------------ > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > End of Freeradius-Users Digest, Vol 117, Issue 5 > ************************************************ > -- Regards,

3 2

mschap : NT-Password has not been normalized by the 'pap' module.
by Mohamed Lrhazi 29 Apr '15

29 Apr '15

Hello, Trying to get freeradius working for tls and mschap and ldap based authentication... seems the password is found correctly in LDAP, but fails to be decoded maybe? the passwords in LDAP look like: {MD4}6DDDA<an so on..> The pap module is enabled, by the default config, in the end of the authorize section in sites-enabled/default and inner-tunnel. Or is this not my problem at all? and I should be looking elsewhere? Thanks a lot, Mohamed. root@27840c0ba8ef:/data# freeradius -v freeradius: FreeRADIUS Version 3.0.3, for host x86_64-pc-linux-gnu, built on May 20 2014 at 11:59:21 freeradius -XXX : ... (8) ldap : --> ou=people,dc=georgetown,dc=edu (8) ldap : Performing search in 'ou=people,dc=georgetown,dc=edu' with filter '(uid=ml623)', scope 'sub' (8) ldap : Waiting for search result... (8) ldap : User object found at DN "uid=ml623,ou=People,dc=georgetown,dc=edu" (8) ldap : Processing user attributes (8) ldap : control:NT-Password := 0x7b4d44347d36444<and so on....> rlm_ldap (ldap): Released connection (4) (8) [ldap] = ok (8) [expiration] = noop (8) [logintime] = noop (8) WARNING: pap : Auth-Type already set. Not setting to PAP (8) [pap] = noop (8) } # authorize = updated (8) Found Auth-Type = EAP (8) # Executing group from file /etc/freeradius/sites-enabled/inner-tunnel (8) authenticate { (8) eap : Expiring EAP session with state 0xd374de30d37cc42e (8) eap : Finished EAP session with state 0xd374de30d37cc42e (8) eap : Previous EAP request found for state 0xd374de30d37cc42e, released from the list (8) eap : Peer sent MSCHAPv2 (26) (8) eap : EAP MSCHAPv2 (26) (8) eap : Calling eap_mschapv2 to process EAP data (8) eap_mschapv2 : # Executing group from file /etc/freeradius/sites-enabled/inner-tunnel (8) eap_mschapv2 : Auth-Type MS-CHAP { (8) WARNING: mschap : No Cleartext-Password configured. Cannot create LM-Password (8) WARNING: mschap : NT-Password has not been normalized by the 'pap' module. Authentication will fail (8) mschap : Creating challenge hash with username: ml623 (8) mschap : Client is using MS-CHAPv2 (8) ERROR: mschap : FAILED: No NT/LM-Password. Cannot perform authentication (8) ERROR: mschap : MS-CHAP2-Response is incorrect (8) [mschap] = reject

7 34

Authenticating users on LDAP based on Group name
by Jose Torres-Berrocal 24 Apr '15

24 Apr '15

I am using the Freeradius2 2.1.12_1/2.2.5_3 pkg v1.6.10 in pfsense 2.1.5 I can't modify the conf files manually. I have to use the pfsense WebGui. I could authenticate the users of the LDAP succesfully but when I try to authenticate using group membership options it fails with the following logs. Wed Mar 25 13:39:09 2015 : Info: Loaded virtual server <default> Wed Mar 25 13:39:09 2015 : Info: Ready to process requests. Wed Mar 25 13:39:27 2015 : Auth: Invalid user ( [ldap] Pairs do not match): [administrator] (from client squid port 111) Wed Mar 25 13:39:33 2015 : Auth: Invalid user ( [ldap] Pairs do not match): [administrator] (from client squid port 111) Wed Mar 25 13:39:34 2015 : Auth: Invalid user ( [ldap] Pairs do not match): [administrator] (from client squid port 111) On pfsense I do not see an option to run in debug mode, but probably you can help me with the pfsense produced ldap conf file. I do not use fancy stuff. After I get it working I may try to add TLS configuration to have encrypted comm or passwords. The LDAP is an Active Directory on a Windows 2003 Server. The group name is InternetAccess. (Is this case sensitive?) I do not have a radiusprofile, where there is mention of radiusprofile is a default generated line. (In pfsense I may change the line but can not removed it or comment it.) LDAP CONF: /usr/pbi/freeradius-i386/etc/raddb/modules/ldap # -*- text -*- # # $ # Lightweight Directory Access Protocol (LDAP) # # This module definition allows you to use LDAP for # authorization and authentication. # # See raddb/sites-available/default for reference to the # ldap module in the authorize and authenticate sections. # # However, LDAP can be used for authentication ONLY when the # Access-Request packet contains a clear-text User-Password # attribute. LDAP authentication will NOT work for any other # authentication method. # # This means that LDAP servers don't understand EAP. If you # force "Auth-Type = LDAP", and then send the server a # request containing EAP authentication, then authentication # WILL NOT WORK. # # The solution is to use the default configuration, which does # work. # # Setting "Auth-Type = LDAP" is ALMOST ALWAYS WRONG. We # really can't emphasize this enough. # ldap { # # Note that this needs to match the name in the LDAP # server certificate, if you're using ldaps. server = "jetsms-srv2003.jetdom.local" port = "389" identity = "cn=pfsense,cn=Users,dc=jetdom,dc=local" password = Mypassword basedn = "cn=Users,dc=jetdom,dc=local" filter = "(sAMAccountName=%{%{Stripped-User-Name}:-%{User-Name}})" base_filter = "(objectclass=radiusprofile)" # How many connections to keep open to the LDAP server. # This saves time over opening a new LDAP socket for # every authentication request. ldap_connections_number = 5 # seconds to wait for LDAP query to finish. default: 20 timeout = 4 # seconds LDAP server has to process the query (server-side # time limit). default: 20 # # LDAP_OPT_TIMELIMIT is set to this value. timelimit = 3 # # seconds to wait for response of the server. (network # failures) default: 10 # # LDAP_OPT_NETWORK_TIMEOUT is set to this value. net_timeout = 1 # # This subsection configures the tls related items # that control how FreeRADIUS connects to an LDAP # server. It contains all of the "tls_*" configuration # entries used in older versions of FreeRADIUS. Those # configuration entries can still be used, but we recommend # using these. # tls { # Set this to 'yes' to use TLS encrypted connections # to the LDAP database by using the StartTLS extended # operation. # # The StartTLS operation is supposed to be # used with normal ldap connections instead of # using ldaps (port 689) connections start_tls = no cacertfile = /usr/pbi/freeradius-i386/etc/raddb/certs/ca_ldap1_cert.pem cacertdir = /usr/pbi/freeradius-i386/etc/raddb/certs/ certfile = /usr/pbi/freeradius-i386/etc/raddb/certs/radius_ldap1_cert.crt keyfile = /usr/pbi/freeradius-i386/etc/raddb/certs/radius_ldap1_cert.key randfile = /usr/pbi/freeradius-i386/etc/raddb/certs/random # Certificate Verification requirements. Can be: # "never" (don't even bother trying) # "allow" (try, but don't fail if the certificate # can't be verified) # "demand" (fail if the certificate doesn't verify.) # # The default is "allow" require_cert = "never" } ### default_profile = "cn=radprofile,ou=dialup,o=My Org,c=UA" ### ### profile_attribute = "radiusProfileDn" ### ### access_attr = "dialupAccess" ### # Mapping of RADIUS dictionary attributes to LDAP # directory attributes. dictionary_mapping = ${confdir}/ldap.attrmap ################## THE BELOW IS NOT COMPILED WITH FREERADIUS ################################# # Set password_attribute = nspmPassword to get the # user's password from a Novell eDirectory # backend. This will work ONLY IF FreeRADIUS has been # built with the --with-edir configure option. # # See also the following links: # # http://www.novell.com/coolsolutions/appnote/16745.html # https://secure-support.novell.com/KanisaPlatform/Publishing/558/3009668_f.S… # # Novell may require TLS encrypted sessions before returning # the user's password. # # password_attribute = userPassword # Un-comment the following to disable Novell # eDirectory account policy check and intruder # detection. This will work *only if* FreeRADIUS is # configured to build with --with-edir option. # edir_account_policy_check = no ################## THE ABOVE IS NOT COMPILED WITH FREERADIUS ################################# # # Group membership checking. Disabled by default. # groupname_attribute = cn groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{control:Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{control:Ldap-UserDn})))" groupmembership_attribute = InternetAccess compare_check_items = yes do_xlat = yes access_attr_used_for_allow = yes # # The following two configuration items are for Active Directory # compatibility. If you see the helpful "operations error" # being returned to the LDAP module, uncomment the next # two lines. # ### MS Active Directory Compatibility is disabled ### # # By default, if the packet contains a User-Password, # and no other module is configured to handle the # authentication, the LDAP module sets itself to do # LDAP bind for authentication. # # THIS WILL ONLY WORK FOR PAP AUTHENTICATION. # # THIS WILL NOT WORK FOR CHAP, MS-CHAP, or 802.1x (EAP). # # You can disable this behavior by setting the following # configuration entry to "no". # # allowed values: {no, yes} # set_auth_type = yes # ldap_debug: debug flag for LDAP SDK # (see OpenLDAP documentation). Set this to enable # huge amounts of LDAP debugging on the screen. # You should only use this if you are an LDAP expert. # # default: 0x0000 (no debugging messages) # Example:(LDAP_DEBUG_FILTER+LDAP_DEBUG_CONNS) #ldap_debug = 0x0028 # # Keepalive configuration. This MAY NOT be supported by your # LDAP library. If these configuration entries appear in the # output of "radiusd -X", then they are supported. Otherwise, # they are unsupported, and changing them will do nothing. # keepalive { # LDAP_OPT_X_KEEPALIVE_IDLE idle = 60 # LDAP_OPT_X_KEEPALIVE_PROBES probes = 3 # LDAP_OPT_X_KEEPALIVE_INTERVAL interval = 3 } }

4 24

Alternative to ClientLogin for Google Apps authentication?
by Daniel Smith 16 Apr '15

16 Apr '15

Hi, My organization has a FreeRADIUS server set up to authenticate wifi users with their Google Apps email address and generated app password. It accepts them over EAP in plain text and then runs them against the ClientLogin API in a perl script. Google has deprecated ClientLogin and is cutting it off in April this year. I have consulted with a couple cloud radius providers and they say they can keep this system working as it currently does - users create a Google app password, sign into the WiFi network with it, and they get on the network. This is ideal since we can just direct our existing server's IP to the cloud provider, and our hundreds of clients keep working without a single change. Is there any way FreeRADIUS can authenticate against Google with an app password, without ClientLogin being around anymore? I looked into OAuth2 but it looks like that will require all existing clients to manually sign in again and change details, since it'll require interaction to create the first refresh token. A horrifying other option is to start caching user's passwords on the radius server as they are successfully authenticated, so that we have their working config stored, then when Google cuts off the API we authenticate users against a local database of those stored passwords, manually adding/disabling new/old ones for any user changes. Ugly, insecure, and broken. Any advice? Thanks, Dan

3 7

Usernames with escape sequences
by James Sumners 13 Apr '15

13 Apr '15

I have Freeradius authenticating to an Active Directory system via ntlm_auth. When a username in the format "foobar\jdoe" comes in, where "foobar" is the domain and "jdoe" is the real username, the authentication succeeds just fine. But if username is "foobar\tdoe" then it gets expanded to "foobar doe". Here's some real output where the passed in username was "CCSU\tstudent": ``` (0) mschap : Client is using MS-CHAPv1 with NT-Password (0) mschap : Executing: "/bin/ntlm_auth --request-nt-key --username=%{%{mschap:User-Name}:-None} --domain=%{%{mschap:NT-Domain}:-None} --challenge=%{%{mschap:Challenge}:-00} --nt-response=%{%{mschap:NT-Response}:-00}" (0) mschap : expand: "--username=%{%{mschap:User-Name}:-None}" -> '--username=CCSU student' (0) mschap : No NT-Domain was found in the User-Name. (0) mschap : expand: "--domain=%{%{mschap:NT-Domain}:-None}" -> '--domain=' (0) mschap : mschap1: ac (0) mschap : expand: "--challenge=%{%{mschap:Challenge}:-00}" -> '--challenge=ac132ce03cba1933' (0) mschap : expand: "--nt-response=%{%{mschap:NT-Response}:-00}" -> '--nt-response=ff768eafb00738e62a3a92e103bf5c7baa7d926da2248b88' (0) mschap : Program returned code (1): Logon failure (0xc000006d) (0) mschap : External script failed. (0) ERROR: mschap : External script says: Logon failure (0xc000006d) ``` How do I prevent the escape sequence from being expanded?

5 11

3.0.7 -> run "make install" twice
by tom greisch 10 Apr '15

10 Apr '15

Hello, today i compiled Freeradius Version 3.0.7./configure -> okmake -> okmake install -> Error Message====================================== INSTALL doc/deployment/MACOSX INSTALL doc/deployment/supervise-radiusd.rst INSTALL doc/deployment/OS2 INSTALL doc/deployment/CYGWIN.rst INSTALL raddb/ mkdir: cannot create directory ‘/usr/local/etc/raddb/’: File exists raddb/all.mk:69: recipe for target '/usr/local/etc/raddb/' failed make: *** [/usr/local/etc/raddb/] Error 1 ====================================== If i type "make install" again -> It works

6 9

Dynamic vlan with ldap group fail
by Sautron Nick 01 Apr '15

01 Apr '15

Hello everyone, I have a problem concerning the dynamic assignment of VLAN according to ldap groups. Here is my shemas ldap: dc = company, dc = com ou = eduroam ou = groups cn = service cn = personal cn = student cn = users my users files : DEFAULT Ldap-Group == "service" Service-Type = Framed-User, Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-ID = 5 DEFAULT Ldap-Group == "personnal" Service-Type = Framed-User, Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-ID = 6 DEFAULT Ldap-Group == "student" Service-Type = Framed-User, Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-ID = 7 DEFAULT Ldap-Group == "users" Service-Type = Framed-User, Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-ID = 8 modules/ldap files : ldap { # # Note that this needs to match the name in the LDAP # server certificate, if you're using ldaps. server = "********" identity = "cn=admin,ou=eduroam,dc=company,dc=fr" password = ****** basedn = "ou=People,dc=company,dc=fr" filter = "(&(Login=%{%{Stripped-User-Name}:-%{User-Name}})(dialupAccess=true))" base_filter = "(objectclass=radiusprofile)" # How many connections to keep open to the LDAP server. # This saves time over opening a new LDAP socket for # every authentication request. ldap_connections_number = 5 # seconds to wait for LDAP query to finish. default: 20 timeout = 4 # seconds LDAP server has to process the query (server-side # time limit). default: 20 ............ # # Group membership checking. Disabled by default. # groupname_attribute = cn groupmembership_filter = "(&(Login=%{%{Stripped-User-Name}:-%{User-Name}})(isMemberOf=ou=groups,ou=eduroam,dc=company,dc=fr))" #groupmembership_attribute = radiusGroupName freeradius -X extract ..... [ldap] Entering ldap_groupcmp() [files] expand: ou=People,dc=****,dc=fr -> ou=People,dc=*****,dc=fr [files] expand: %{Stripped-User-Name} -> [files] ... expanding second conditional [files] expand: %{User-Name} -> ***** [files] expand: (&(Login=%{%{Stripped-User-Name}:-%{User-Name}})(dialupAccess=true)) -> (&(Login=******)(dialupAccess=true)) [ldap] ldap_get_conn: Checking Id: 0 [ldap] ldap_get_conn: Got Id: 0 [ldap] performing search in ou=People,dc=*******,dc=fr, with filter (&(Login=*****)(dialupAccess=true)) [ldap] ldap_release_conn: Release Id: 0 [files] expand: %{Stripped-User-Name} -> [files] ... expanding second conditional [files] expand: %{User-Name} -> ****** [files] expand: (&(Login=%{%{Stripped-User-Name}:-%{User-Name}})(isMemberOf=ou=groups,ou=eduroam,dc=*****,dc=fr)) -> (&(Login=******)(isMemberOf=ou=groups,ou=eduroam,dc=******,dc=fr)) [ldap] ldap_get_conn: Checking Id: 0 [ldap] ldap_get_conn: Got Id: 0 [ldap] performing search in ou=People,dc=*****,dc=fr, with filter (&(cn=service)(&(Login=*****)(isMemberOf=ou=groups,ou=eduroam,dc=*****,dc=fr))) [ldap] object not found [ldap] ldap_release_conn: Release Id: 0 rlm_ldap::ldap_groupcmp: Group service not found or user is not a member. [ldap] Entering ldap_groupcmp() [files] expand: ou=People,dc=******,dc=fr -> ou=People,dc=****,dc=fr [files] expand: %{Stripped-User-Name} -> [files] ... expanding second conditional [files] expand: %{User-Name} -> ***** [files] expand: (&(Login=%{%{Stripped-User-Name}:-%{User-Name}})(isMemberOf=ou=groups,ou=eduroam,dc=*******,dc=fr)) -> (&(Login=*******)(isMemberOf=ou=groups,ou=eduroam,dc=*****,dc=fr)) [ldap] ldap_get_conn: Checking Id: 0 [ldap] ldap_get_conn: Got Id: 0 [ldap] performing search in ou=People,dc=*****,dc=fr, with filter (&(cn=personnal)(&(Login=*******)(isMemberOf=ou=groups,ou=eduroam,dc=******,dc=fr))) [ldap] object not found [ldap] ldap_release_conn: Release Id: 0 rlm_ldap::ldap_groupcmp: Group personnal not found or user is not a member. [ldap] Entering ldap_groupcmp() [files] expand: ou=People,dc=******,dc=fr -> ou=People,dc=*****,dc=fr [files] expand: %{Stripped-User-Name} -> [files] ... expanding second conditional [files] expand: %{User-Name} -> ***** [files] expand: (&(Login=%{%{Stripped-User-Name}:-%{User-Name}})(isMemberOf=ou=groups,ou=eduroam,dc=*******,dc=fr)) -> (&(Login=*****)(isMemberOf=ou=groups,ou=eduroam,dc=*******,dc=fr)) [ldap] ldap_get_conn: Checking Id: 0 [ldap] ldap_get_conn: Got Id: 0 [ldap] performing search in ou=People,dc=****,dc=fr, with filter (&(cn=student)(&(Login=*****)(isMemberOf=ou=groups,ou=eduroam,dc=****,dc=fr))) [ldap] object not found [ldap] ldap_release_conn: Release Id: 0 rlm_ldap::ldap_groupcmp: Group student not found or user is not a member. [ldap] Entering ldap_groupcmp() [files] expand: ou=People,dc=******,dc=fr -> ou=People,dc=****,dc=fr [files] expand: %{Stripped-User-Name} -> [files] ... expanding second conditional [files] expand: %{User-Name} -> ******* [files] expand: (&(Login=%{%{Stripped-User-Name}:-%{User-Name}})(isMemberOf=ou=groups,ou=eduroam,dc=*****,dc=fr)) -> (&(Login=****)(isMemberOf=ou=groups,ou=eduroam,dc=*****,dc=fr)) [ldap] ldap_get_conn: Checking Id: 0 [ldap] ldap_get_conn: Got Id: 0 [ldap] performing search in ou=People,dc=*******,dc=fr, with filter (&(cn=users)(&(Login=******)(isMemberOf=ou=groups,ou=eduroam,dc=*****,dc=fr))) [ldap] object not found [ldap] ldap_release_conn: Release Id: 0 rlm_ldap::ldap_groupcmp: Group users not found or user is not a member. ++[files] returns noop [ldap] performing user authorization for ******* [ldap] expand: %{Stripped-User-Name} -> [ldap] ... expanding second conditional [ldap] expand: %{User-Name} -> ***** [ldap] expand: (&(Login=%{%{Stripped-User-Name}:-%{User-Name}})(dialupAccess=true)) -> (&(Login=****)(dialupAccess=true)) [ldap] expand: ou=People,dc=******,dc=fr -> ou=People,dc=****,dc=fr [ldap] ldap_get_conn: Checking Id: 0 [ldap] ldap_get_conn: Got Id: 0 [ldap] performing search in ou=People,dc=******,dc=fr, with filter (&(Login=*****)(dialupAccess=true)) .......... Someone can explain to me, why the freeradius server can not find the groups? Is this the right configuration? Best regards

2 3

Re: Help PLease
by Matthew Newton 31 Mar '15

31 Mar '15

Hi, Please keep replies on-list. On Thu, Mar 26, 2015 at 03:38:51PM +0000, aschappell(a)clearedgeit.com wrote: > What do I test the authentication with besides the local host? I > am new to this radius thing. When I go to login to wifi I do not > see anything in the debug output that is showing someone is > logging in. OK, so you need to make sure that your access point / wireless controllers are configured correctly and have access to your RADIUS server. You have a number of clients added in clients.conf - have you added the actual client (AP) that you are testing from? Is there a firewall in the way or iptables on the server? Start by running tcpdump on the server to make sure that the packets are actually reaching the RADIUS server. If they aren't, and there are no firewalls, then make sure your AP/wireless system is configured correctly. Matthew -- Matthew Newton, Ph.D. <mcn4(a)le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp(a)le.ac.uk>

7 52

Ready for 2.2.7?
by Alan DeKok 31 Mar '15

31 Mar '15

Any objections? I think we're pretty much OK. I also think that after 2.2.7, we will EOL the version 2 series. This means that security fixes will be added, but we will no longer be having regular releases. Now that 3.0 is available, we recommend that new deployments use that, instead of version 2. Alan DeKok.

6 25

integrating daloradius
by Adam Schappell 31 Mar '15

31 Mar '15

Hello, Has anyone been successful with integrating freeradius with daloradius? I have freeradius running and can get to the web interface for daloradius but do not know how to get the users that are on the wifi to show up? Also is there any way to import users from AD (since im using MS AD for authentication). Thanks!

2 1