Configuring a router to query a givenradius server is well and widely documented, but all of the docs and tuts I've found skip the question of what to put in the radius server for doing 802.1x authentication. Can anyone here provide any details? My goal is username/passwd auth, at least for now. Thank you. -JimC -- James Cloos <cloos@jhcloos.com> OpenPGP: 0x997A9F17ED7DAEA6
Hi James, https://wiki.freeradius.org/guide/FreeRADIUS-Active-Directory-Integration-HO... http://deployingradius.com/documents/configuration/active_directory.html The above how-to should give something to start with. Regards On 12/11/16, James Cloos <cloos@jhcloos.com> wrote:
Configuring a router to query a givenradius server is well and widely documented, but all of the docs and tuts I've found skip the question of what to put in the radius server for doing 802.1x authentication.
Can anyone here provide any details?
My goal is username/passwd auth, at least for now.
Thank you.
-JimC -- James Cloos <cloos@jhcloos.com> OpenPGP: 0x997A9F17ED7DAEA6 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- v4s[at]#unrelated | "sh3ll is just the beginning"
On Sun, Dec 11, 2016 at 01:56:47PM -0500, James Cloos wrote:
Configuring a router to query a givenradius server is well and widely documented, but all of the docs and tuts I've found skip the question of what to put in the radius server for doing 802.1x authentication.
For 802.1X at the basic level simply adding a username and password as described in the users file will just work for many common EAP types. Setup is documented on Alan's web site http://deployingradius.com/documents/configuration/ Matthew -- Matthew Newton, Ph.D. <mcn4@leicester.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
Both, Thanks for the tips. They helped. I had presumed that more attributes than just username and passwd would be required. It is helpful to know that they are not. (I've been subscribed for ages, but haven't managed radius since I worked for an isp back in the 90s....) -JimC -- James Cloos <cloos@jhcloos.com> OpenPGP: 0x997A9F17ED7DAEA6
On Wed, Dec 14, 2016 at 01:07:40PM -0500, James Cloos wrote:
I had presumed that more attributes than just username and passwd would be required. It is helpful to know that they are not.
You get most of the problems when you don't have access to the cleartext password. If you've got that, you're generally good to go. Matthew -- Matthew Newton, Ph.D. <mcn4@leicester.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
participants (3)
-
James Cloos -
Johnny R -
Matthew Newton