1

SERVER EDITION

© JUNE 2020

FreeRADIUS

for Windows v3.0.22

2

FreeRADIUS Server for Windows 3.0.22 (64-bit)

Thank you for choosing FreeRADIUS Server for Windows. Build Options OpenSSL 1.1.1g (TLS 1.3) ODBC support (unixODBC 2.3.7) OpenLDAP 2.4.50 IPv6

Tools eapol_test

Who uses FreeRADIUS for Windows Many organisations and companies around the globe!

Notes This product is made available ‘gratis’ (free of charge).

The source code can be downloaded from the FreeRADIUS Project,

http://freeradius.org/. Alternatively, it can be requested via email.

A quick and simple registration is required in order to receive regular updates.

“To the best of our knowledge, this is the first and only Windows native port of FreeRADIUS Server.

This contribution started with FreeRADIUS 2.2.6 and continues to present.”.

3

Server Start-Up

Go to: Start - Programs - FreeRADIUS 3.0.22 – Start RADIUS Server (Debug)

Sanity Tests

Go to: Start - Programs - FreeRADIUS 3.0.22 - RADIUS Command Prompt

Run the following scripts to test if the server is working properly:

a) radtestwin.cmd

b) radtest-digest.cmd

c) radeapclient.cmd

d) radtest-sspi.cmd

4

Server Version Info

FR Server Output

5

EAP METHODS

The 'eapol_test' tool can be used to test different EAP methods.

Examples

EAP-FAST

eapol_test -a 127.0.0.1 -p 1812 -s testing123 -c eap-fast.conf

FR Server Output

6

eapol_test Output

EAP-PWD

eapol_test -a 127.0.0.1 -p 1812 -s testing123 -c eap-pwd.conf

7

eapol_test Output

8

SSPI

Windows AD (Active Directory) users authentication. It supports NTLM & Kerberos.

AD Domain Controller Details

AD Domain Controller Not Available

Examples

radclient -x -s -r 1 -6 -f radclient-sspi.conf [::1]:1812 auth testing123

9

radclient -x -s -r 1 -6 -f radclient-sspi.conf [::1]:1812 auth testing123

Successful Credential Validation

Disabled User Account

10

LDAP

a) Install and set up OpenLDAP Server

b) Edit sites-enabled/default file:

authorize { ... ... ldap ... } authenticate { ... ... Auth-Type LDAP { ldap } ... }

c) Edit mods-enabled/ldap file and adjust some values accordingly (e.g. server name, base dn, etc) d) Start OpenLDAP Server

FR LDAP Module

11

SQL

MS SQL SERVER Make sure that MS SQL server service is up and running and it can be accessed.

(FreeTDS and unixODBC utilities can be used to test connection to MS SQL Servers.)

a) Create ‘radius’ database b) Execute all SQL scripts under the etc/raddb/sql/mssql folder c) Edit etc/raddb/sql.conf file:

sql { # # Set the database to one of: # # mysql, mssql, oracle, postgresql # database = "unixodbc" driver = "rlm_sql_${database}" server = "MSSQLTestServer" login = "testsqluser" password = "xxxx" ... }

d) Edit etc/raddb/sites-enabled/default file:

authorize { ... sql ... } accounting { ... sql ... }

12

SQL Server Management Studio

13

Testing MS SQL Server Connection (ODBC)

SQL Module Instance