Hi, Is it possible to send client certificate to à freeradius server by apache. I would like to manage authentication by radius only. No way to do something like 802.1x with radius and apache and navigator ? Tanks. Vince
On Jun 25, 2018, at 8:34 AM, vince technical address <vince.technicaladdress@gmail.com> wrote:
Is it possible to send client certificate to à freeradius server by apache. I would like to manage authentication by radius only. No way to do something like 802.1x with radius and apache and navigator ?
There's been work on allowing browsers to do 802.1X through HTTP to a web server, and then to RADIUS/. See "project moonshot". But... it isn't widely deployed. And it's not trivial to set up. Since browsers don't generally support 802.1X, the answer really is "no, this isn't really possible". Alan DeKok.
Thanks Alan. Well, if i understand, Apache do authentication by certificate and if i want other methods, i can configure apache to use radius (for example ldap, otp). I can't do certificate authentication by radius with à front apache. Vince Le lun. 25 juin 2018 à 14:41, Alan DeKok <aland@deployingradius.com> a écrit :
On Jun 25, 2018, at 8:34 AM, vince technical address < vince.technicaladdress@gmail.com> wrote:
Is it possible to send client certificate to à freeradius server by
apache.
I would like to manage authentication by radius only. No way to do something like 802.1x with radius and apache and navigator ?
There's been work on allowing browsers to do 802.1X through HTTP to a web server, and then to RADIUS/. See "project moonshot".
But... it isn't widely deployed. And it's not trivial to set up.
Since browsers don't generally support 802.1X, the answer really is "no, this isn't really possible".
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Jun 25, 2018, at 8:49 AM, vince technical address <vince.technicaladdress@gmail.com> wrote:
Well, if i understand, Apache do authentication by certificate and if i want other methods, i can configure apache to use radius (for example ldap, otp).
I can't do certificate authentication by radius with à front apache.
No. Apache would have to implement EAP, which is a very complex protocol. Alan DeKok.
participants (2)
-
Alan DeKok -
vince technical address