Configuring WPA2-Enterprise with Freeradius

Posted by Vincent O. on Server Fault See other posts from Server Fault or by Vincent O.
Published on 2012-02-01T17:11:01Z Indexed on 2012/04/12 11:32 UTC
Read the original article Hit count: 461

Filed under:

freeradius

I'm trying to set up an authenticated wifi network with Freeradius. I've managed to get things working using self-signed certs etc.

The problem is Windows clients need to uncheck the "Automatically use my windows logon name and password [etc.]" option in the MSCHAPv2 settings. When I connect to my local university with Eduroam, it automatically asks for a username and password instead of sending windows login credentials. How did the sysadmins accomplish this? Is it some kind of RADIUS Attribute that gets sent back?

Related posts about freeradius

Accounting setup in freeradius with mikrotik and the "always" module

as seen on Server Fault - Search for 'Server Fault'
I have a freeradius setup that is being used to provide authentication for users on a wireless network. The access points are all Mikrotik hardware and the users are connected 24/7. We've been using Daloradius with mysql and freeradius 2. The boss wants to use the accounting information and while… >>> More
Configuring WPA2-Enterprise with Freeradius

as seen on Server Fault - Search for 'Server Fault'
I'm trying to set up an authenticated wifi network with Freeradius. I've managed to get things working using self-signed certs etc. The problem is Windows clients need to uncheck the "Automatically use my windows logon name and password [etc.]" option in the MSCHAPv2 settings. When I connect to my… >>> More
Radius Authorization against ActiveDirectory and the users file

as seen on Server Fault - Search for 'Server Fault'
I have a problem with my freeradius server configuration. I want to be able to authenticate users against Windows ActiveDirectory (2008 R2) and the users file, because some of my co-workers are not listed in AD. We use the freeradius server to authenticate WLAN users. (PEAP/MSCHAPv2) AD Authentication… >>> More
Accounting setup in freeradius with mikrotik and the "always" module

as seen on Server Fault - Search for 'Server Fault'
I have a freeradius setup that is being used to provide authentication for users on a wireless network. The access points are all Mikrotik hardware and the users are connected 24/7. We've been using Daloradius with mysql and freeradius 2. The boss wants to use the accounting information and while… >>> More
Auth-Type :- Reject in RADIUS users file matches inner tunnel request but sends Access-Accept

as seen on Server Fault - Search for 'Server Fault'
I have WPA2 802.11x EAP authentication setup using FreeRADIUS 2.1.8 on Ubuntu 10.04.4 talking to OpenLDAP, and can successfully authenticate using PEAP/MSCHAPv2, TTLS/MSCHAPv2 and TTLS/PAP (both via the AP and using eapol_test). I am now trying to restrict access to specific SSIDs based on the LDAP… >>> More

Developer IT