Questions tagged [freeradius]
The freeradius tag has no usage guidance.
13
questions
0
votes
1
answer
156
views
EAP TLS identity requriements
I am using freeradius to test EAP-TLS. Authorization only succeeds if I specify an identity. It doesn't even have to match any fields in the client certificate. Why is that required if I have a cert ...
CommunityBot
- 1
2
votes
2
answers
421
views
WPA(2/3)-PSK-compatible per-device Wi-Fi passwords to prevent AP MITM on IoT networks
While WPA2-PSK and WPA3-SAE are really secure once a connection has been established, my understanding is that if you have access to the Wi-Fi password you can impersonate the AP without any problems. ...
- 61
1
vote
1
answer
2k
views
How to protect against MAC spoofing in WiFi network?
I have this scenario:
I want to create a WiFi network for a hotel that the customers should pay to gain access to the internet.
I tried Captive portal, but captive portal is very vulnerable against ...
- 1
0
votes
1
answer
550
views
Are there other types of NT Password (NTLM Hash) besides raw MD4?
According to the freeradius document https://freeradius.org/radiusd/man/rlm_pap.txt I can use NT-Password as the type of storing user's password. However, I have only found the type of generating raw ...
- 1,141
0
votes
0
answers
943
views
Unable to decrypt password protected certificates with Freeradius or from GUI
I am trying to use Freeradius 3.0 for authentication with certificates. To generate the CA, Server and Client certificate, make is available, reading a specific configuration file for each ...
- 173
17
votes
1
answer
7k
views
How can Freeradius detect if the password provided is right when only the salted hash is stored in the database without the salt
I am discovering both Freeradius and the password hashing mechanism. I built a database (in MySQL) to store the passwords of some users. I have a user with the password in clear text, another one ...
- 173
1
vote
1
answer
5k
views
Freeradius eap-tls - unknown CA
I'm trying to setup an EAP-TLS with latest Freeradius on Debian Buster
Used the Freeradius to make certificates
But keep running into "unknown CA" error :
(4) Found Auth-Type = eap
(4) # Executing ...
- 1
1
vote
1
answer
12k
views
How are RADIUS packets encrypted? [duplicate]
This seems like an obvious question, but I can't easily find a clear answer.
I'm setting up a FreeRADIUS server on my LAN just for curiosity's sake, but I want to know if the packets are encrypted at ...
- 198k
0
votes
1
answer
1k
views
Break into WPA2-Enterprise RADIUS wifi network by stealing credentials
I need to ensure that no un-authorized DEVICE gains access to a wireless LAN network.
Notice I said, "device". This means that I need to ensure that only authorized personnel can join the LAN and ...
0
votes
0
answers
241
views
EAP-TLS : implementation and testing of a communication between two processes
I'm trying to make a simple EAP-TLS communication between two processes and capture it with Wireshark. Is there any library that can be used? (like mbedtls in the TLS case).
I have found a lot of ...
- 1
1
vote
1
answer
4k
views
OpenVPN using google authenticator
I'm a little new to OpenVPN. I'm trying to get google authenticator to work with OpenVPN but I'm having a little trouble. Currently I'm tring to setup a radius server to run the authentication then ...
- 111
1
vote
1
answer
2k
views
Security concerns of RADIUS based server/workstation auth
So I'm using WPA2-EAP for a few years now with FreeRadius server. And it's pretty okay, I mean I don't really consider wifi access to be so super-duper critical break in success because it's pretty ...
- 184
1
vote
2
answers
8k
views
What can I do with a radius shared secret?
During an authorized pentest, I found several radius servers and a /etc/raddb/server file that stores shared secret, e.g
10.10.10.10 123456 15
Now what could one do with this "shared secret", ...
- 72.7k