apt-get install freeradius

Rozměr: px

Začít zobrazení ze stránky:

Download "apt-get install freeradius"

Patrik Kubíček
před 9 lety
Počet zobrazení:

3 users apt-get install freeradius apt-get update apt-get build-dep freeradius apt-get install libssl-dev /usr/src/freeradius mkdir /usr/src/freeradius && cd /usr/src/freeradius apt-get source freeradius

4 control freradius-1.1.8/debian/ Build-Depends libssl-devbuild-depends Build-Depends: debhelper (>= ), dpatch (>= 2), autotools-dev, libtool (>= 1.5), libltdl3-dev, libpam0g-dev, libmysqlclient15-dev libmysqlclient14-dev libmysqlclient-dev, libgdbm-dev, libldap2-dev, libsasl2-dev, libiodbc2-dev, libkrb5-dev, libperl-dev, snmp, libsnmp9- dev libsnmp5-dev libsnmp4.2-dev, libpq-dev postgresql-dev, libssl-dev Package: freeradius-eaptls Architecture: any Depends: freeradius (= ${binary:version}), ${shlibs:depends} Description: eap-tls module for FreeRADIUS server Debian will not provide a binary version of the rlm_eap_tls.so library. This module is required if you want to use EAP/TLS authentication, commonly used for Wi-Fi access points. Package: freeradius-eappeap Architecture: any Depends: freeradius (= ${binary:version}), ${shlibs:depends} Description: eap-peap module for FreeRADIUS server Debian will not provide a binary version of the rlm_eap_peap.so library. This module is required if you want to use EAP/PEAP authentication, commonly used for Wi-Fi access points. rules /usr/src/freeradius/freeradius-1.1.8/debian/ modulepackages eap_peapeap_tls buildssl modulepackagesbuildssl modulepackages = krb5 ldap sql_mysql sql_iodbc eap_peap eap_tls buildssl= --without-rlm_otp --without-rlm_sql_postgresql --without-snmp eap/peapeap/tls /usr/ src/freeradius/freeradius-1.1.8/debian/ freeradius- eappeap.postinst #! /bin/sh set -e case "$1" in configure) if [ -x "`which invoke-rc.d 2>/dev/null`" ]; then invoke-rc.d freeradius reload else /etc/init.d/freeradius reload fi abort-upgrade)

5 abort-remove) abort-deconfigure) esac #DEBHELPER# freeradius-eaptls.postinst #! /bin/sh set -e case "$1" in configure) if [ -x "`which invoke-rc.d 2>/dev/null`" ]; then invoke-rc.d freeradius restart else /etc/init.d/freeradius restart fi abort-upgrade) abort-remove) abort-deconfigure) esac #DEBHELPER# dpkg-buildpackage dpkg -i freeradius_ _i386.deb dpkg -i freeradius-eaptls_ _i386.deb dpkg -i freeradius-eappeap_ _i386.deb ps aux grep freeradius freerad ? sbin/freeradius Ssl 15:28 0:00 /usr/ -X freeradius -X

d/freeradius restart fi abort-upgrade) abort-remove) abort-deconfigure) esac #DEBHELPER# dpkg-buildpackage dpkg -i freeradius_1.1.8-0_i386.

6 /etc/freeradius/radiusd.conf mschapmschap radiusd.conf mschap { } authtype = MS-CHAP use_mppe = yes require_encryption = yes require_strong = yes authorize preprocessmschapsuffixeapfiles authenticate { # MSCHAP authentication. Auth-Type MS-CHAP { mschap } # Allow EAP authentication. eap } radiusd.conf clients.conf radiusd.conf clients.conf client { secret = APtestheslo shortname = MyAP } clients.confeap.conf /etc/freeradius default_eap_type md5peap default_eap_type = peap eap.conf tlstls tls { private_key_password = whatever private_key_file = ${raddbdir}/certs/cert-srv.pem certificate_file = ${raddbdir}/certs/cert-srv.pem CA_file = ${raddbdir}/certs/democa/cacert.pem dh_file = ${raddbdir}/certs/dh

$confeap.conf /etc/freeradius default_eap_type md5peap default_eap_type = peap eap.conf tlstls tls { private_key_password = whatever private_key_file = ${raddbdir}/certs/cert-srv.$

7 } random_file = ${raddbdir}/certs/random peap default_eap_type = mschapv2 users /etc/freeradius/ "jakub" Cleartext-Password := "klienttestheslo" Reply-Message = "Hello World!" /etc/init.d/freeradius radtest jakub klienttestheslo localhost 0 testing123 Sending Access-Request of id 73 to port 1812 User-Name = "jakub" User-Password = "klienttestheslo" NAS-IP-Address = NAS-Port = 0 rad_recv: Access-Accept packet from host :1812, id=73, length=34 Reply-Message = "Hello World!" tls eap.conf apt-get install openssl pwgen openssl.cnf /etc/ssl/ openssl.cnf dir =./democa

testing123 Sending Access-Request of id 73 to 127.0.0.1 port 1812 User-Name = "jakub" User-Password = "klienttestheslo" NAS-IP-Address = 255.

8 dir = /etc/freeradius/eap/eapca eapopenssl.cnf CA.pl /usr/lib/ssl/misc/ /etc/freeradius/eap CATOP="./demoCA"; CATOP="/etc/freeradius/eap/eapCA"; pwgen 32 1 xefai6ohgh6ieth0ajaik5aebie5urik CA.plnewca /etc/freeradius/eap./ca.pl -newca /etc/freeradius/eap/eapca./ca.pl -newreq -nodes xpextensions /usr/share/doc/freeradius/examples/xpxtensions /etc/freeradius/eap openssl ca -config /etc/ssl/openssl.cnf -policy policy_anything -out / etc/freeradius/eap/newcert.pem -extensions xpserver_ext -extfile /etc/ freeradius/eap/xpextensions -infiles /etc/freeradius/eap/newreq.pem openssl dhparam -check -text out dh dd if=/dev/urandom of=random count=2

/ca.pl -newreq -nodes xpextensions /usr/share/doc/freeradius/examples/xpxtensions /etc/freeradius/eap openssl ca -config /etc/ssl/openssl.

9 eap.conf /etc/freeradius/tls private_key_file = /etc/freeradius/eap/newkey.pem certificate_file = /etc/freeradius/eap/newcert.pem CA_file = /etc/freeradius/eap/eapca/cacert.pem dh_file = /etc/freeradius/eap/dh random_file = /etc/freeradius/eap/random fragment_size = 1024 include_length = ye /etc/freeradius/eap/eapca/cacert.pem TESTNET4 WPA2AES shared secretshared secret APtestheslo /etc/freeradius/clients.conf cacert.pem crt cacert.crtcertificate Install Certificate Certificate Import Wizard Place all certificates in the following storecertificate Store:Trusted Root Certification Authorities Next Wireless Networks Add... Wireless network properties Association TESTNET4 Wireless network keynetwork AuthenticationWPA2 (Enterprise)Data encryption Authentication EAP typeprotected EAP (PEAP)

10 Properties Secured password (EAP-MSCHAP-v2) /etc/freeradius/users Configure Automatically use my Windows logon name and password (and domain if any). users /etc/freeradius

11 freeradius

Podobné dokumenty

Možnosti Web-based autentizace na Cisco Catalyst 3560

Možnosti Web-based autentizace na Cisco Catalyst 3560 Filip Zatloukal, Login: ZAT108 Pavel Kovář, Login: KOV452 Abstrakt: Tato práce popisuje možnosti Web-based autentizace na zařízení Cisco Catalyst 3560