Questions tagged [freeradius]
The freeradius tag has no usage guidance.
14
questions
17
votes
1
answer
6k
views
How can Freeradius detect if the password provided is right when only the salted hash is stored in the database without the salt
I am discovering both Freeradius and the password hashing mechanism. I built a database (in MySQL) to store the passwords of some users. I have a user with the password in clear text, another one ...
- 173
2
votes
2
answers
282
views
WPA(2/3)-PSK-compatible per-device Wi-Fi passwords to prevent AP MITM on IoT networks
While WPA2-PSK and WPA3-SAE are really secure once a connection has been established, my understanding is that if you have access to the Wi-Fi password you can impersonate the AP without any problems. ...
- 61
1
vote
2
answers
8k
views
What can I do with a radius shared secret?
During an authorized pentest, I found several radius servers and a /etc/raddb/server file that stores shared secret, e.g
10.10.10.10 123456 15
Now what could one do with this "shared secret", ...
- 1,755
1
vote
1
answer
1k
views
How to protect against MAC spoofing in WiFi network?
I have this scenario:
I want to create a WiFi network for a hotel that the customers should pay to gain access to the internet.
I tried Captive portal, but captive portal is very vulnerable against ...
- 19
1
vote
1
answer
5k
views
Freeradius eap-tls - unknown CA
I'm trying to setup an EAP-TLS with latest Freeradius on Debian Buster
Used the Freeradius to make certificates
But keep running into "unknown CA" error :
(4) Found Auth-Type = eap
(4) # Executing ...
- 21
1
vote
1
answer
12k
views
How are RADIUS packets encrypted? [duplicate]
This seems like an obvious question, but I can't easily find a clear answer.
I'm setting up a FreeRADIUS server on my LAN just for curiosity's sake, but I want to know if the packets are encrypted at ...
- 113
1
vote
1
answer
4k
views
OpenVPN using google authenticator
I'm a little new to OpenVPN. I'm trying to get google authenticator to work with OpenVPN but I'm having a little trouble. Currently I'm tring to setup a radius server to run the authentication then ...
1
vote
1
answer
2k
views
Security concerns of RADIUS based server/workstation auth
So I'm using WPA2-EAP for a few years now with FreeRadius server. And it's pretty okay, I mean I don't really consider wifi access to be so super-duper critical break in success because it's pretty ...
- 217
0
votes
1
answer
1k
views
Break into WPA2-Enterprise RADIUS wifi network by stealing credentials
I need to ensure that no un-authorized DEVICE gains access to a wireless LAN network.
Notice I said, "device". This means that I need to ensure that only authorized personnel can join the LAN and ...
0
votes
1
answer
486
views
Are there other types of NT Password (NTLM Hash) besides raw MD4?
According to the freeradius document https://freeradius.org/radiusd/man/rlm_pap.txt I can use NT-Password as the type of storing user's password. However, I have only found the type of generating raw ...
- 101
0
votes
0
answers
8
views
Ubuntu 22.04 LTS: EAP-TLS not working [migrated]
I'm setting up RADIUS server using FreeRADIUS and self-signed certificate. Tested using eapol_test and successfully logged in. But when I'm trying to add a PC running Ubuntu 22.04 LTS to the network, ...
- 101
0
votes
1
answer
97
views
EAP TLS identity requriements
I am using freeradius to test EAP-TLS. Authorization only succeeds if I specify an identity. It doesn't even have to match any fields in the client certificate. Why is that required if I have a cert ...
0
votes
0
answers
878
views
Unable to decrypt password protected certificates with Freeradius or from GUI
I am trying to use Freeradius 3.0 for authentication with certificates. To generate the CA, Server and Client certificate, make is available, reading a specific configuration file for each ...
- 173
0
votes
0
answers
233
views
EAP-TLS : implementation and testing of a communication between two processes
I'm trying to make a simple EAP-TLS communication between two processes and capture it with Wireshark. Is there any library that can be used? (like mbedtls in the TLS case).
I have found a lot of ...
- 1