Questions tagged [freeradius]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
59 views

Unable to decrypt password protected certificates with Freeradius or from GUI

I am trying to use Freeradius 3.0 for authentication with certificates. To generate the CA, Server and Client certificate, make is available, reading a specific configuration file for each ...
17
votes
1answer
5k views

How can Freeradius detect if the password provided is right when only the salted hash is stored in the database without the salt

I am discovering both Freeradius and the password hashing mechanism. I built a database (in MySQL) to store the passwords of some users. I have a user with the password in clear text, another one ...
1
vote
1answer
225 views

How to protect against MAC spoofing in WiFi network?

I have this scenario: I want to create a WiFi network for a hotel that the customers should pay to gain access to the internet. I tried Captive portal, but captive portal is very vulnerable against ...
1
vote
1answer
2k views

Freeradius eap-tls - unknown CA

I'm trying to setup an EAP-TLS with latest Freeradius on Debian Buster Used the Freeradius to make certificates But keep running into "unknown CA" error : (4) Found Auth-Type = eap (4) # Executing ...
0
votes
1answer
6k views

How are RADIUS packets encrypted? [duplicate]

This seems like an obvious question, but I can't easily find a clear answer. I'm setting up a FreeRADIUS server on my LAN just for curiosity's sake, but I want to know if the packets are encrypted at ...
0
votes
0answers
89 views

EAP-TLS : implementation and testing of a communication between two processes

I'm trying to make a simple EAP-TLS communication between two processes and capture it with Wireshark. Is there any library that can be used? (like mbedtls in the TLS case). I have found a lot of ...
1
vote
1answer
4k views

OpenVPN using google authenticator

I'm a little new to OpenVPN. I'm trying to get google authenticator to work with OpenVPN but I'm having a little trouble. Currently I'm tring to setup a radius server to run the authentication then ...
0
votes
1answer
1k views

Security concerns of RADIUS based server/workstation auth

So I'm using WPA2-EAP for a few years now with FreeRadius server. And it's pretty okay, I mean I don't really consider wifi access to be so super-duper critical break in success because it's pretty ...
0
votes
1answer
827 views

Break into WPA2-Enterprise RADIUS wifi network by stealing credentials

I need to ensure that no un-authorized DEVICE gains access to a wireless LAN network. Notice I said, "device". This means that I need to ensure that only authorized personnel can join the LAN and ...
0
votes
2answers
5k views

What can I do with a radius shared secret?

During an authorized pentest, I found several radius servers and a /etc/raddb/server file that stores shared secret, e.g 10.10.10.10 123456 15 Now what could one do with this "shared secret", ...