freeRadius using EAP with custom auth script -
i attempting setup freeradius server authenticate against web service. reason there complicated workflow involving account status , mac address. workflow seemed out of place in freeradius. user names, , encrypted passwords stored remotely radius server. works fine using radclient test. when started using the access point, learned communicates radius server via eap-tls. means user-password argument not available script.
is there way have eap auth check user authentication against script? mean, can password send secondary service?
alternately, there way user-password encrypted eap-message data?
access points don't place restrictions on eap type. device connecting ap negotiates eap type freeradius. if it's using eap-tls it's windows machine hasn't been configured different.
investigate eap flavours find out ones available. if have eap-ttls-pap can send plaintext password wireless client, , user authenticate against web service.
in freeradius v3.0.x there's rlm_rest module, can perform basic auth on behalf of user, little configuration.
Comments
Post a Comment