FreeRADIUS

FreeRADIUS copied to clipboard

Hi Cornelinux, thanks for the good work so far. We setup privacyIDEA with the privacyIDEA plugin for FreeRADIUS and implemented a server which does PAP for a VPN service in...

tomtomgelb

Hi, I have a question about the rlm_perl.ini file: is it possible to add more endpoints? For example: [Default] URL = https://myurl.check.it/validate/check ... [AnotherSite] URL = https://myurl2.check.it/validate/check Thank you, stefano

stefano-zaniboni

Fixed: pam_radius skip_passwd

5

At our site we only allow: * OTP * pubkey, OTP So no password ask at all. We have the following pam_radius setup * `auth sufficient pam_radius_auth.so skip_passwd retry=1` This...

basvandervlies

WebAuthn support

4

Is it possible to support WebAuthn via RADIUS? From my understanding this may be hard - similar to [push tokens](https://github.com/privacyidea/FreeRADIUS/issues/38) where @cornelinux mentioned: > The problem is that the out...

hex-m

Do not try to parse the response in case of a timeout

1

Currently the response from privacyIDEA gets parsed even when there is none. The following error is caught but we can avoid this altogether.

plettich

Allow the same attribute to be configured several times

1

In many scenarios it can be necessary to configure the same attribute several times: ~~~~ [Attribute Filter-Id] dir = user userAttribute = gruppen regex = CN=Enterprise\ Admins,CN=Users,DC=testfoo,DC=intranet prefix = FIX-BUILTIN-Enter...

cornelinux

Some special characters (like "€") in the username are triggering errors. Or FreeRADIUS handles passwords as byte-strings.

sepp67

Weird error - OpenVPN with radiusplugin.so plugin auth on Alpine

1

I am not sure I followed https://privacyidea.readthedocs.io/en/latest/application_plugins/openvpn.html - Freeradius Since there is no openvpn-auth-radius its build from source -> http://www.nongnu.org/radiusplugin/radiusplugin_v2.1a_beta1.tar.gz PI is running with latest 3.6.3 - Radius AUTH only...

itxworks

Remove URI encoding of user and pass params

2

The URI encoding is already done within LWP::UserAgent. If you had a space in your password, it would get URI encoded into %20, which would then get encoded again into...

cwallacetlc

Add Push Token Functionality

5

- added push token compatibility - new configuration values added to poll for challenges, and authenticate with administrative/service account - Note: RADIUS client timeout must be set to a value...

droobah