FreeRADIUS - Revision history

Michael.mast: /* Client Config */

2021-07-06T20:33:37Z

Client Config

Michael.mast: /* NTLM Auth */

2021-07-06T20:33:15Z

NTLM Auth

Michael.mast: /* Install */

2021-07-06T20:28:30Z

Install

Michael.mast: /* Amazon Linux 2 */

2021-07-06T19:46:40Z

Amazon Linux 2

Michael.mast: /* sssd */

2021-07-02T17:16:40Z

sssd

Michael.mast: /* sssd */

2021-07-02T17:14:18Z

sssd

Michael.mast: /* sssd */

2021-07-02T17:13:14Z

sssd

Michael.mast: /* Amazon Linux 2 */

2021-07-02T17:11:38Z

Amazon Linux 2

Michael.mast: Created page with "==Purpose== RADIUS server for WPA Enterprise authentication ==Install== ===Amazon Linux 2=== https://rharmonson.github.io/2factorcos7.html#freeradius *Set DNS serve..."

2021-07-02T16:21:45Z

Created page with "==Purpose== RADIUS server for WPA Enterprise authentication ==Install== ===Amazon Linux 2=== <ref>https://rharmonson.github.io/2factorcos7.html#freeradius</ref> *Set DNS serve..."

New page

==Purpose==
RADIUS server for WPA Enterprise authentication
==Install==
===Amazon Linux 2===
<ref>https://rharmonson.github.io/2factorcos7.html#freeradius</ref>
*Set DNS servers to DCs to be used
*Set Chrony sources to use the DCs, comment out the Amazon pools.
*Set static IP, add to Windows DNS.
*Install FreeRadius packages.
<pre>
sudo yum -y install freeradius freeradius-utils
</pre>

@@ Line 65: / Line 65: @@
 *Start Winbind
 <pre>
-sudo systemctl status winbind.service
+sudo systemctl enable --now winbind.service
 </pre>
 ====sssd====

@@ Line 26: / Line 26: @@
 </pre>
 ===NTLM Auth===
 ===Client Config===

@@ Line 12: / Line 12: @@
 </pre>
 *Update /etc/raddb/radiusd.conf user and group from radiusd to root. Though I have done this with another radius server running google auth, I think there should be a better option. More research should be done.
 *Uncomment pam module from /etc/raddb/sites-enabled/default
 *Create symlink for pam module
@@ Line 24: / Line 25: @@
 DEFAULT Auth-Type := PAM
 </pre>
 *Add your client, in this case I added a subnet where the access points reside.
 <pre>

@@ Line 9: / Line 9: @@
 *Install FreeRadius packages.
 <pre>
-sudo yum -y install freeradius freeradius-utils
+sudo yum -y install freeradius freeradius-utils samba-winbind-clients
 </pre>
 *Update /etc/raddb/radiusd.conf user and group from radiusd to root. Though I have done this with another radius server running google auth, I think there should be a better option. More research should be done.
@@ Line 32: / Line 32: @@
          nas_type = other
+}
 </pre>
 ====sssd====

@@ Line 34: / Line 34: @@
 </pre>
 ====sssd====
 <pre>
 sudo yum -y install sssd realmd adcli samba-common-tools
-sudo realm join -U <domain admin account> yourdomain.net
+sudo realm join -U domain_admin yourdomain.net
 </pre>

@@ Line 3: / Line 3: @@
 ==Install==
 ===Amazon Linux 2===
-<ref>https://rharmonson.github.io/2factorcos7.html#freeradius</ref>
+<ref>https://github.com/rharmonson/richtech/wiki/CentOS-7-Minimal-&-Two-factor-Authentication-using-FreeRADIUS-3,-SSSD-1.12,-&-Google-Authenticator#sssd%20DNS</ref><ref>https://rharmonson.github.io/2factorcos7.html#freeradius</ref>
 *Set DNS servers to DCs to be used
 *Set Chrony sources to use the DCs, comment out the Amazon pools.
@@ Line 10: / Line 10: @@
 <pre>
 sudo yum -y install freeradius freeradius-utils
 </pre>