i'm looking to focus a problem i have - i think the main issue is not freeradius but it's a good place to ask. I have a server that's do both Radius and accounting for Wifi random users (web redirected system). now i just discovered that to authenticate the users i have to use the server "secret" password on the accounting side i can use whatever i want and it will still work. (if the secret for the server is 12345 i can use abcde for the accounting and i'll get the accounting files). The question is this, if we stick to the AAA protocol do you really need the "radius secret" to use accounting? or can i just drop it? -- ____ Sometimes you just glow in the dark...
On 21 January 2013 07:47, Tzvika Gelber <daragaard@gmail.com> wrote:
The question is this, if we stick to the AAA protocol do you really need the "radius secret" to use accounting? or can i just drop it?
Hi. Maybe this will help a bit. http://www.hjp.at/doc/rfc/rfc2866.txt Regards -- Primož Marinšek
On 01/21/2013 06:47 AM, Tzvika Gelber wrote:
i'm looking to focus a problem i have - i think the main issue is not freeradius but it's a good place to ask.
I have a server that's do both Radius and accounting for Wifi random users (web redirected system).
now i just discovered that to authenticate the users i have to use the server "secret" password
It's not a "server secret password". The correct term is "radius shared secret".
on the accounting side i can use whatever i want and it will still work. (if the secret for the server is 12345 i can use abcde for the accounting and i'll get the accounting files).
No, this doesn't work reliably.
The question is this, if we stick to the AAA protocol do you really need the "radius secret" to use accounting? or can i just drop it?
No. The secret is required for correct operation.
participants (3)
-
Phil Mayers -
Primož Marinšek -
Tzvika Gelber