Hello Everyone I have a Question if freeradius does support user/client certificate + username and password authentication meanwhile? Here is a conversation from 2017: http://lists.freeradius.org/pipermail/freeradius-users/2017-September/088917... I try to configure a VPN with IKEv2: https://forum.netgate.com/topic/150554/ikev2-certificate-eap-username-passwo... Which i think is not supported? I hope someone who understands more than me could confirm. Many thanks Regards Alitai
On Feb 16, 2020, at 9:11 AM, Home IT <homeit4all@gmail.com> wrote:
I have a Question if freeradius does support user/client certificate + username and password authentication meanwhile?
FreeRADIUS supports *authentication protocols*. Some authentication protocols like MS-CHAP don't support certificates. Some authentication protocols like EAP-TLS don't support passwords. FreeRADIUS *can* do EAP-TTLS with client certificates for the TLS portion, and passwords for the TTLS portion.
Here is a conversation from 2017: http://lists.freeradius.org/pipermail/freeradius-users/2017-September/088917...
I try to configure a VPN with IKEv2: https://forum.netgate.com/topic/150554/ikev2-certificate-eap-username-passwo...
Which i think is not supported?
Those messages talk about the limitations of Windows, not FreeRADIUS. What *exactly* are you trying to do? Which authentication protocol are you using? What OS is trying to gain network access? Alan DeKok.
Thanks for writing back to me.
Those messages talk about the limitations of Windows, not FreeRADIUS. Thanks for this info.
That has already helped. Thanks so much. Regards Alitai Am So., 16. Feb. 2020 um 15:28 Uhr schrieb Alan DeKok < aland@deployingradius.com>:
On Feb 16, 2020, at 9:11 AM, Home IT <homeit4all@gmail.com> wrote:
I have a Question if freeradius does support user/client certificate + username and password authentication meanwhile?
FreeRADIUS supports *authentication protocols*. Some authentication protocols like MS-CHAP don't support certificates. Some authentication protocols like EAP-TLS don't support passwords.
FreeRADIUS *can* do EAP-TTLS with client certificates for the TLS portion, and passwords for the TTLS portion.
Here is a conversation from 2017:
http://lists.freeradius.org/pipermail/freeradius-users/2017-September/088917...
I try to configure a VPN with IKEv2:
https://forum.netgate.com/topic/150554/ikev2-certificate-eap-username-passwo...
Which i think is not supported?
Those messages talk about the limitations of Windows, not FreeRADIUS.
What *exactly* are you trying to do? Which authentication protocol are you using? What OS is trying to gain network access?
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alan DeKok -
Home IT