Freeradius and daloRADIUS

Install FreeRADIUS

sudo apt-get install freeradius

Verify FreeRADIUS version

$ freeradius -v
freeradius: FreeRADIUS Version 2.1.12, for host x86_64-pc-linux-gnu, built on Jul 26 2017 at 15:30:42

Run a quick config check

$ sudo freeradius -CX
...
Configuration appears to be OK.

Review the Configuration Files

• Max number of requests
  

  Increase the default value of 1024 if you’re planning on having more than 4 clients authenticating at a time.

  #  max_requests: The maximum number of requests which the server keeps
  #  track of.  This should be 256 multiplied by the number of clients.
  #  e.g. With 4 clients, this number should be 1024.
  #
  #  If this number is too low, then when the server becomes busy,
  #  it will not respond to any new requests, until the 'cleanup_delay'
  #  time has passed, and it has removed the old requests.
  #
  #  If this number is set too high, then the server will use a bit more
  #  memory for no real benefit.
  #
  #  If you aren't sure what it should be set to, it's better to set it
  #  too high than too low.  Setting it to 1000 per client is probably
  #  the highest it should be.
  #
  #  Useful range of values: 256 to infinity
  #
  max_requests = 1024
  

Add Clients

client P6-MOJO-1 {
    ipaddr = 192.168.130.20
    secret = strong-passphrase-here
}

Define EAP Methods

Add Users

test Cleartext-Password := "test"

Cleartext-Password = statement indicating we are going to assign a clear text password to this username. Notice that “:=“ is used for assignment.

Start FreeRadius and check

$ sudo service freeradius restart
freeradius stop/waiting
freeradius start/running, process 29805
$ sudo service freeradius status
freeradius start/running, process 29805

Test Authentication

$ radtest test test 127.0.0.1 0 testing123
Sending Access-Request of id 145 to 127.0.0.1 port 1812
        User-Name = "test"
        User-Password = "test"
        NAS-IP-Address = 127.0.1.1
        NAS-Port = 0
        Message-Authenticator = 0x00000000000000000000000000000000
rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=145, length=20