Re: FreeRadius in Wireless Security http://www.dslreports.com/forum/r20147411 en Wed, 20 Aug 2008 19:51:11 EDT Wed, 20 Aug 2008 19:51:11 EDT Re: FreeRadius http://www.dslreports.com/forum/remark,20214512 OnHeL :
said by ackovski See Profile :

KEWL!!! OnHel ALE ALE!!!
...Thank you!
;o)]]> http://www.dslreports.com/forum/remark,20214512 Sun, 23 Mar 2008 22:13:47 EDT Re: FreeRadius http://www.dslreports.com/forum/remark,20207551 ackovski : And it works!
The icon looks like connected, but there is no data transfer!
It Works! :)]]> http://www.dslreports.com/forum/remark,20207551 Sat, 22 Mar 2008 13:31:52 EDT Re: FreeRadius http://www.dslreports.com/forum/remark,20179414 anon : I'm making some assumptions since I don't know how your AP is specifically configured, but normally (at least for me) if an SSID is specifically set up to do EAP / 802.1X only, then you should not be permitted access since a RADIUS server will need to validate your EAPOL-Identity Response (and other challenge messages) in real-time before letting you into the network.

However, maybe your AP is configured to fallback on using a pre-shared key setup somehow or an alternate authentication procedure? Or perhaps there's a credential caching mechanism here at work (maybe someone else can clarify if this is possible?).]]> http://www.dslreports.com/forum/remark,20179414 Mon, 17 Mar 2008 14:18:53 EDT Re: FreeRadius http://www.dslreports.com/forum/remark,20177748 ackovski : I configured the AP and the Zeroshell and Radius works with both PEAP and TTLS! Zeroshell logs all successful PEAP, TTLS and the wrong unauthorized attempts!
It works! YAY!
One strange thing I noticed, but had no time to check...
My PCI wireless card connected to the AP after I turned off the Zeroshell... it connected as if it was granted access...
But the server was not on, so I don't know if it was just a temporary... or it will still work?! :uhh:
If it still works... whats the use of the Radius? :huh:]]> http://www.dslreports.com/forum/remark,20177748 Mon, 17 Mar 2008 08:30:27 EDT Re: FreeRadius http://www.dslreports.com/forum/remark,20168857 ackovski : KEWL!!! OnHel ALE ALE!!!
I managed to run it under WinXP with VMWare and works SO smooth. This way I can keep my win apps and still use all on one comp! Even managed to make an ADSL connection through it and works fine! I can ping google and use the update option.
Now I have to try the NAT in it to use it to share the internet in my net. Still haven't tried the Radius with EAP-TTLS or PEAP, but will soon!
Sheesh!
Thank you!]]> http://www.dslreports.com/forum/remark,20168857 Sat, 15 Mar 2008 10:39:30 EDT Re: FreeRadius http://www.dslreports.com/forum/remark,20156923 OnHeL : »www.zeroshell.net/eng/forum/view···hp?t=363

States 1.1.7
--
Do you remember when House began?]]> http://www.dslreports.com/forum/remark,20156923 Thu, 13 Mar 2008 01:55:12 EDT Re: FreeRadius http://www.dslreports.com/forum/remark,20153312 jbibe : If you are referring to my post, I was not answering you. I was suggesting SecureW2 to justanotherguy.]]> http://www.dslreports.com/forum/remark,20153312 Wed, 12 Mar 2008 15:01:38 EDT Re: FreeRadius http://www.dslreports.com/forum/remark,20153067 ackovski : Almost all of the clients in my net use WinXP. SecureW2 is a client software. I don't need client software because all the PCI cards already come with their own client software that works with all WPA encryptions.
I think that you are complicating this thread. Why install or use some third party software if these versions have it installed already?
I was just asking if someone has used the integrated FreeRadius in one of these Linux versions.]]> http://www.dslreports.com/forum/remark,20153067 Wed, 12 Mar 2008 14:14:40 EDT Re: FreeRadius http://www.dslreports.com/forum/remark,20152269 jbibe :
said by OnHeL See Profile :

I use ZeroShell on a PC Engines Alix board, works great.
Do you happen to know what version of FreeRADIUS is included in ZeroShell? From the 8/22/07 announcement, it appears that it includes freeradius-1.1.4.]]> http://www.dslreports.com/forum/remark,20152269 Wed, 12 Mar 2008 12:06:08 EDT Re: FreeRadius http://www.dslreports.com/forum/remark,20150839 OnHeL : I use ZeroShell on a PC Engines Alix board, works great.

»www.zeroshell.net/eng
»www.netgate.com/product_info.php···s_id=542
--
Do you remember when House began?]]> http://www.dslreports.com/forum/remark,20150839 Wed, 12 Mar 2008 04:28:06 EDT Re: FreeRadius http://www.dslreports.com/forum/remark,20147830 jbibe : Several packages are available at

»download.opensuse.org/repositori···rk:/aaa/

Although I have never used these packages, they should work without too much trouble. If you decide to experiment with one of these packages, look for the latest freeradius server version; i.e., freeradius-server-2.0.2. It is preconfigured for TLS, PEAP, and TTLS. To help the new user, this version automatically produces some certificates.

You will need to add the names and passwords in the users file. For example,

"John Doe" Cleartext-Password := "Password"

You will also need to enter your network and server password in clients.conf. Modify one the preset network configurations. For example,

The inner EAP in the preset TTLS configuration is MD5. You can change the inner EAP by editing the eap.conf file.

You will have to look for the user, clients.conf, and eap.conf files. I would look in the /etc/raddb/ directory.

I am using freeradius-server-2.0.2, running on Fedora 8. It is configured for TLS. I have also used PEAP.

Edit: If you plan to use the server in a business environment, you should consider an Enterprise version, as suggested by No_Strings. ]]> http://www.dslreports.com/forum/remark,20147830 Tue, 11 Mar 2008 17:15:06 EDT Re: FreeRadius http://www.dslreports.com/forum/remark,20147806 jbibe : If you are running Windows, try SecureW2 for TTLS.]]> http://www.dslreports.com/forum/remark,20147806 Tue, 11 Mar 2008 17:10:50 EDT Re: FreeRadius http://www.dslreports.com/forum/remark,20147411 anon : Installing FreeRADIUS on CentOS 5 was pretty easy. Something like:

yum install freeradius

or something along those lines, then just configure (in that ditro, it was all under /etc/raddb). Question - what supplicant are you using to run EAP-TTLS? Funk (Juniper) Odyssey?]]> http://www.dslreports.com/forum/remark,20147411 Tue, 11 Mar 2008 15:56:13 EDT Re: FreeRadius http://www.dslreports.com/forum/remark,20147147 No_Strings : I wasn't clear, apparently.

I realize that TLS requires certs. I made my own and installed them. Can't blame you for not wanting to go down that road.

FreeRADIUS works. It works with TLS, TTLS and any number of other protocols. Since you already have the client side done, you only need to worry about the server side.

You said:
said by ackovski See Profile :

I desperately need a radius server.
I tried to install it on a Mandriva, but without sucess.
I'm trying to clarify so I know best how to direct you. Is it Mandriva or FreeRADIUS you had trouble installing? Installing the FR server is not difficult, even if you don't use a distro that includes it. If you know nothing about Linux, if would be appropriate to ask some more questions.

Ubuntu is stupid easy. It's not geared toward a server environment, in my view, and I''d be reluctant to use it in a production business environment. RHEL and SuSE Enterprise would be more appropriate choices. There is a charge for support. CentOS, a free clone of RHEL would be a decent choice as well.

Will you need support? What's at stake? Is it a business? What is the risk - financial or otherwise - if data leakage occurs?

Not trying to be difficult. Honest. Just trying to get you the best possible answers.]]> http://www.dslreports.com/forum/remark,20147147 Tue, 11 Mar 2008 15:09:49 EDT Re: FreeRadius http://www.dslreports.com/forum/remark,20146921 ackovski : I made it work with Steel Belted Radius under Windows XP, but it was trial version.
I would like to try some of these versions because they already have integrated installed version of FreeRadius.
I just need someone that has tried them if they really work or need something more to be installed.
I need EAP-TTLS exactly because it doesn't need certificates at the client side, only user and pass.
EAP_TLS needs certs a the clients side.]]> http://www.dslreports.com/forum/remark,20146921 Tue, 11 Mar 2008 14:24:37 EDT Re: FreeRadius http://www.dslreports.com/forum/remark,20146813 No_Strings : I'm not using it right now, but I installed FreeRADIUS on Slack and Red Hat, configured for eap_tls.

What specifically is not working? What errors? Is the installation where you're having the problem or the configuration? Did you try running it in debug to elicit more details, etc.?]]> http://www.dslreports.com/forum/remark,20146813 Tue, 11 Mar 2008 14:06:56 EDT FreeRadius http://www.dslreports.com/forum/remark,20146772 ackovski : I got a small wireless network with several clients.
I desperately need a radius server.
I tried to install it on a Mandriva, but without sucess.
Has anyone tried some of these versions?
»wiki.freeradius.org/Linux
Are these already installed versions of freeradius and is it working with EAP-TTLS?
Can you post some screen shots of the radius?]]> http://www.dslreports.com/forum/remark,20146772 Tue, 11 Mar 2008 14:00:56 EDT