freeradius 2.2 / radsecproxy integration
Hi, Can anyone point me at a working config showing FR 2.2.x / radsecproxy integration. Thx A
Hi,
Can anyone point me at a working config showing FR 2.2.x / radsecproxy integration.
freeradius into radsec, radsec into freeradius or both? for the first, have radsec listening locally od UDP on a different port and proxy requests from freeradius to it - add the FreeRADIUS server as a client of radsecproxy for the latter, have radsec listening on TCP 2083 to receive stuff and configure it to send packets UDP to freeradius - as a normal RADIUS client..add the radsecproxy server as a client I can email you offlist with some other bits if you want alan
On 12 Jun 2015, at 11:16, A.L.M.Buxey@lboro.ac.uk wrote:
Hi,
Can anyone point me at a working config showing FR 2.2.x / radsecproxy integration.
freeradius into radsec, radsec into freeradius or both?
Both, think I've worked it out ANYWAY but be good to check. Have got FR2.2.7/radsecproxy 1.6.6 at eduroam1.york.ac.uk end and FR 3.0.8 at radius.sharaz.info end. Can run on FR2.2.7 end radtest -t mschap -x alex@sharaz.info <something> localhost 1 testing123 0 localhost and at the sharaz.info end I get. ........ LS Web Client Authentication' (0) chain-depth=0, (0) error=0 (0) --> BUF-Name = radsec.york.ac.uk (0) --> subject = /OU=Domain Control Validated/CN=radsec.york.ac.uk (0) --> issuer = /C=NL/O=TERENA/CN=TERENA SSL CA (0) --> verify return:1 (0) TLS_accept: SSLv3 read client certificate A (0) TLS_accept: Need to read more data: SSLv3 read client key exchange A In SSL Handshake Phase In SSL Accept mode SSL Application Data (0) TLS_accept: Need to read more data: SSLv3 read client key exchange A (0) SSL_read Error Error in fragmentation logic: SSL_WANT_READ (0) Application data status 10 ...... so connection getting there and validating certs o.k.
for the first, have radsec listening locally od UDP on a different port and proxy requests from freeradius to it - add the FreeRADIUS server as a client of radsecproxy
for the latter, have radsec listening on TCP 2083 to receive stuff and configure it to send packets UDP to freeradius - as a normal RADIUS client..add the radsecproxy server as a client
I can email you offlist with some other bits if you want
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
o.k. got it sorted using radtest on eduroam1.york.ac.uk to authenticate against account on radius.sharaz.info radtest -t pap -x alexs@sharaz.info password localhost 1 shared-key 0 localhost and out it pops on radius.sharaz.info Need to try the other way round now. with authenticating fred@york.ac.uk on radius.sharaz.info -> eduroam1.york.ac.uk via radsec. A On 12 Jun 2015, at 11:16, A.L.M.Buxey@lboro.ac.uk wrote:
Hi,
Can anyone point me at a working config showing FR 2.2.x / radsecproxy integration.
freeradius into radsec, radsec into freeradius or both?
for the first, have radsec listening locally od UDP on a different port and proxy requests from freeradius to it - add the FreeRADIUS server as a client of radsecproxy
for the latter, have radsec listening on TCP 2083 to receive stuff and configure it to send packets UDP to freeradius - as a normal RADIUS client..add the radsecproxy server as a client
I can email you offlist with some other bits if you want
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
A.L.M.Buxey＠lboro.ac.uk -
Alex Sharaz