User Tools
сервис_freeradius
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
сервис_freeradius [2026/04/28 15:48] val [Настройка c использованием текстовых файлов] |
сервис_freeradius [2026/05/03 09:37] (current) val [Тестирование сервера] |
||
|---|---|---|---|
| Line 39: | Line 39: | ||
| client switch { | client switch { | ||
| secret = testing123 | secret = testing123 | ||
| - | shortname = switch | + | #require_message_authenticator = no |
| + | #limit_proxy_state = yes | ||
| } | } | ||
| Line 51: | Line 52: | ||
| </code><code> | </code><code> | ||
| user1 Cleartext-Password := "rpassword1" | user1 Cleartext-Password := "rpassword1" | ||
| - | # Framed-IP-Address = 192.168.100+X.101 | + | # Framed-IP-Address = 192.168.100+X.1 |
| user2 Cleartext-Password := "rpassword2", Simultaneous-Use := 1 | user2 Cleartext-Password := "rpassword2", Simultaneous-Use := 1 | ||
| - | # Framed-IP-Address = 192.168.100+X.102, | ||
| # Service-Type = NAS-Prompt-User, | # Service-Type = NAS-Prompt-User, | ||
| # cisco-avpair = "shell:priv-lvl=15" | # cisco-avpair = "shell:priv-lvl=15" | ||
| Line 112: | Line 112: | ||
| # apt install freeradius-utils | # apt install freeradius-utils | ||
| - | $ radtest user1 rpassword1 127.0.0.1 0 testing123 | + | $ radtest user1 rpassword1 127.0.0.1 0 testing123 |
| - | $ radtest root cisco 127.0.0.1 0 testing123 | + | $ radtest root cisco 127.0.0.1 0 testing123 |
| - | $ echo "User-Name=student,User-Password=password,NAS-IP-Address=127.0.0.1" | radclient localhost auth testing123 | + | $ echo "User-Name=student,User-Password=password,NAS-IP-Address=127.0.0.1" | radclient localhost auth testing123 |
| # tail -f /var/log/freeradius/radius.log | # tail -f /var/log/freeradius/radius.log | ||
| Line 145: | Line 145: | ||
| * [[http://windows.microsoft.com/en-us/windows/enable-802-1x-authentication#1TC=windows-7|Enable 802.1X authentication Windows7]] | * [[http://windows.microsoft.com/en-us/windows/enable-802-1x-authentication#1TC=windows-7|Enable 802.1X authentication Windows7]] | ||
| * [[http://habrahabr.ru/post/170949/|Wi-Fi с логином и паролем для каждого пользователя или делаем WPA2-EAP/TLS подручными средствами]] | * [[http://habrahabr.ru/post/170949/|Wi-Fi с логином и паролем для каждого пользователя или делаем WPA2-EAP/TLS подручными средствами]] | ||
| + | |||
| + | * [[Пакет OpenSSL#Создание самоподписанного сертификата]] wild сертификата | ||
| + | <code> | ||
| + | cp wild.key /etc/ssl/private/ | ||
| + | chmod 640 /etc/ssl/private/wild.key | ||
| + | chown root:ssl-cert /etc/ssl/private/wild.key | ||
| + | cp wild.crt /etc/ssl/certs/ | ||
| + | </code> | ||
| <code> | <code> | ||
| freeradius3# cat /etc/freeradius/3.0/mods-available/eap | freeradius3# cat /etc/freeradius/3.0/mods-available/eap | ||
| Line 151: | Line 159: | ||
| ... | ... | ||
| default_eap_type = peap | default_eap_type = peap | ||
| + | ... | ||
| + | #private_key_file = /etc/ssl/private/wild.key | ||
| + | ... | ||
| + | #certificate_file = /etc/ssl/certs/wild.crt | ||
| ... | ... | ||
| </code><code> | </code><code> | ||
| Line 214: | Line 226: | ||
| </code> | </code> | ||
| - | ==== EAP сертификаты ==== | ||
| - | |||
| - | <code> | ||
| - | root@valtest:~ # rcsdiff /usr/local/etc/raddb/eap.conf | ||
| - | </code><code> | ||
| - | diff -r1.1 /usr/local/etc/raddb/eap.conf | ||
| - | 5c5 | ||
| - | < ## $Id: eap.conf,v 1.1 2014/07/29 14:09:57 root Exp $ | ||
| - | --- | ||
| - | > ## $Id: eap.conf,v 1.2 2014/07/30 14:26:59 root Exp root $ | ||
| - | 30c30,31 | ||
| - | < default_eap_type = md5 | ||
| - | --- | ||
| - | > #default_eap_type = md5 | ||
| - | > default_eap_type = peap | ||
| - | 158,159c159,161 | ||
| - | < private_key_password = whatever | ||
| - | < private_key_file = ${certdir}/server.pem | ||
| - | --- | ||
| - | > # private_key_password = whatever | ||
| - | > # private_key_file = ${certdir}/server.pem | ||
| - | > private_key_file = ${certdir}/bmstu.ru.clkey | ||
| - | 171c173,174 | ||
| - | < certificate_file = ${certdir}/server.pem | ||
| - | --- | ||
| - | > # certificate_file = ${certdir}/server.pem | ||
| - | > certificate_file = ${certdir}/bmstu.ru.crt | ||
| - | 188c191,192 | ||
| - | < CA_file = ${cadir}/ca.pem | ||
| - | --- | ||
| - | > # CA_file = ${cadir}/ca.pem | ||
| - | > CA_file = ${cadir}/int.geotrust.crt | ||
| - | </code> | ||
| ==== Использование proxy ==== | ==== Использование proxy ==== | ||
сервис_freeradius.1777380518.txt.gz · Last modified: 2026/04/28 15:48 by val
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
