Wifi authentication/accounting with freeradius on centos 6

In this article we want to set up a Freeradius server and certificates for an encrypted connection. In particular I would like to focus on the connection to linuxmuster. We perform the installation on a current Linux installation here Ubuntu Now we can run a first test. Therefore we stop the freeradius service and restart it manually in debug mode:. If this request was successful, the freeradius server is basically set up and the following authentication procedures should work without any further problems:.

All use a username and password for authentication. You can read more about the different P EAP methods here. If this file does not exist, we must first create a symbolic link.

Note: If you want to use Freeradius 3. As default, Freeradius uses so-called Snake-Oil certificates, which of course are not intended for productive use. Therefore we create a new root CA and a certificate for the server in the following steps. First we open the file ca. We download the source code, unpack it and have to install some dependencies. Then we have to open the file. Normally the authentication request will come from an access point, a captive portal or a wireless controller.

Additionally, you can opt for our Professional Support addon at a later time, should you find yourself needing priority support when things get more complex. Thanks for your tutorial. Radius Authentication seems to be fine, but Accounting is failed with the following error:. Could you try adding the fields acctupdatetime and acctinterval to the radacct table and see if that fixes the issue?

Thanks a lot for your prompt response. Do you mean the radacct in which file? If i check the schema. I was thinking that maybe even though those fields appear in the schema. Can you try logging into MySQL: mysql -u root -p [enter password at the prompt]. Get started now. Notify of. Oldest Newest Most Voted. Inline Feedbacks. Bruno Costa.

Hello, Thanks for your tutorial. Thank you. Also make sure it has a static IP address rather than a dynamic one. Note: The installation instructions are based upon the current CentOS version 5. Therefore we will use a third-party location. However, in the future, you may be able to install a current 2. After the install is complete, reverse this setting.

Now type the install line again in the existing terminal window. A simple mistake can break the configuration and it can take hours to troubleshoot.

If you make any modifications outside of this tutorial, try to take it step-by-step. Do this before running the server for the first time. There are many types of EAP, so you must specify which one you want to use. They connect to the network using their username and password. Next you need to create the usernames and passwords users will enter when connecting to the Wi-Fi network. Modify the IP address as needed, enter a unique secret for each AP, and optionally enter a descriptive name.