Re: radius authentication via TCP/TLS

Alan DeKok via Freeradius-Users <[email protected]> Wed, 8 Jul 2026 09:56:48 -0400
Newsgroups gmane.comp.freeradius.user
Message-ID <[email protected]>
--===============0112746487297943900==
Content-Type: multipart/signed;
	boundary="Apple-Mail=_1F427550-458E-43BC-B89A-44D1010FE832";
	protocol="application/pgp-signature";
	micalg=pgp-sha256


--Apple-Mail=_1F427550-458E-43BC-B89A-44D1010FE832
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

On Jul 8, 2026, at 7:52=E2=80=AFAM, Alan Smith via Freeradius-Users =
<[email protected]> wrote:
>=20
> Thanks for the advice Alan. I tried configuring radsecproxy in another =
server (radsec_server) which radsecproxy config pointing to my radius =
server who is listening at both udp 1812 and tcp 2083.After configuring =
radsecproxy successfully, this new server listens at udp 1812. I ran =
radtest in this server to localhost 1812 and it will go to radius server =
at 2083.Let me confirm this is the correct setup?

  Yes.

> The authentication needs the radsec_server IP address to be present in =
clients.conf. Although it is already present in SQL radius client table, =
it cannot be recognized.I think authentication request that reaches tcp =
2083 are not associated with SQL client table. Did I miss to update =
something?=20

  The server has debug output.  Read it.

  Alan DeKok.


--Apple-Mail=_1F427550-458E-43BC-B89A-44D1010FE832
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
	filename=signature.asc
Content-Type: application/pgp-signature;
	name=signature.asc
Content-Description: Message signed with OpenPGP

-----BEGIN PGP SIGNATURE-----
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=pmrD
-----END PGP SIGNATURE-----

--Apple-Mail=_1F427550-458E-43BC-B89A-44D1010FE832--

--===============0112746487297943900==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
--===============0112746487297943900==--