freeRadius using EAP with custom auth script -


i attempting setup freeradius server authenticate against web service. reason there complicated workflow involving account status , mac address. workflow seemed out of place in freeradius. user names, , encrypted passwords stored remotely radius server. works fine using radclient test. when started using the access point, learned communicates radius server via eap-tls. means user-password argument not available script.

is there way have eap auth check user authentication against script? mean, can password send secondary service?

alternately, there way user-password encrypted eap-message data?

access points don't place restrictions on eap type. device connecting ap negotiates eap type freeradius. if it's using eap-tls it's windows machine hasn't been configured different.

investigate eap flavours find out ones available. if have eap-ttls-pap can send plaintext password wireless client, , user authenticate against web service.

in freeradius v3.0.x there's rlm_rest module, can perform basic auth on behalf of user, little configuration.


Comments

Popular posts from this blog

c++ - Delete matches in OpenCV (Keypoints and descriptors) -

java - Could not locate OpenAL library -

sorting - opencl Bitonic sort with 64 bits keys -