Freeradius, wireless access point and password authentication
Hello, I'm new to freeradius... I want to realize a sort of hot spot using freeradius, mysql (with a graphical interface creating users on it) and some access points (linksys, d-link, etc...). I correctly installed and integrated freeradius and mysql. Now the problem is to use the access points as NASes, and to realize an authentication system which prompts the client computers ( with Windows XP ) for a password in order to associate with the AP. I cannot use certificates to join the AP, because the client computers belongs to occasional visitors, and installing certificates on each client would be little practical. I made different trials, with no success. Thank you in advance for any help, and sorry for my bad english.... :-)
Roberto ha scritto:
Hello, I'm new to freeradius...
Hi Roberto,
I want to realize a sort of hot spot using freeradius, mysql (with a graphical interface creating users on it) and some access points (linksys, d-link, etc...).
It seems you want to make an Authentication Gateway, so you can have a look at this: http://tldp.org/HOWTO/Authentication-Gateway-HOWTO/index.html Hth, Francesco.
Francesco Cristofori ha scritto:
It seems you want to make an Authentication Gateway, so you can have a look at this: http://tldp.org/HOWTO/Authentication-Gateway-HOWTO/index.html
Hth, Francesco.
Thank you very much Francesco (are you italian?), I will take a look at that...
I had a fast look at the authentication gateway howto... Sorry, I do not understand how can it help me... I want to find a means to authenticate the wireless clients towards the access point, not towards the rest of the - wired - network. The wireless client must not be able to associate to the AP, unless it supplies the correct credentials: that way, only authenticated users can associate to the AP and mutually 'see' themselves. Certificates are very good for this, but are not so practical when clients belongs to occasional customers...
Roberto wrote:
I had a fast look at the authentication gateway howto... Sorry, I do not understand how can it help me... I want to find a means to authenticate the wireless clients towards the access point, not towards the rest of the - wired - network. The wireless client must not be able to associate to the AP, unless it supplies the correct credentials: that way, only authenticated users can associate to the AP and mutually 'see' themselves. Certificates are very good for this, but are not so practical when clients belongs to occasional customers... - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
does your AP support 802.1x authentication? Inna Kholodova
On 1/4/07, Roberto <roberto.mezzatesta@tin.it> wrote:
Hello, I'm new to freeradius... I want to realize a sort of hot spot using freeradius, mysql (with a graphical interface creating users on it) and some access points (linksys, d-link, etc...).
I'm working to replace a current wireless deployment (using MAC-based "authentication" as well as requiring a VPN connection) to a mass deployment of access points all feeding back into a ChilliSpot[1] server. Initial prototype and testing showed that it works very well. You may want to look into this as an option. [1]: http://www.chillispot.org/ -- Jeremy L. Gaddis, MCP, GCWN http://www.linuxwiz.net/
Gaddis, Jeremy L. ha scritto:
I'm working to replace a current wireless deployment (using MAC-based "authentication" as well as requiring a VPN connection) to a mass deployment of access points all feeding back into a ChilliSpot[1] server. Initial prototype and testing showed that it works very well. You may want to look into this as an option.
Thanks, I'll try that, too... I'll make you know...
participants (4)
-
Francesco Cristofori -
Gaddis, Jeremy L. -
ij -
Roberto