Re: radius authentication via TCP/TLS
Alan DeKok via Freeradius-Users <[email protected]> Wed, 8 Jul 2026 09:56:48 -0400
| Newsgroups | gmane.comp.freeradius.user |
|---|---|
| Message-ID | <[email protected]> |
--===============0112746487297943900== Content-Type: multipart/signed; boundary="Apple-Mail=_1F427550-458E-43BC-B89A-44D1010FE832"; protocol="application/pgp-signature"; micalg=pgp-sha256 --Apple-Mail=_1F427550-458E-43BC-B89A-44D1010FE832 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 On Jul 8, 2026, at 7:52=E2=80=AFAM, Alan Smith via Freeradius-Users = <[email protected]> wrote: >=20 > Thanks for the advice Alan. I tried configuring radsecproxy in another = server (radsec_server) which radsecproxy config pointing to my radius = server who is listening at both udp 1812 and tcp 2083.After configuring = radsecproxy successfully, this new server listens at udp 1812. I ran = radtest in this server to localhost 1812 and it will go to radius server = at 2083.Let me confirm this is the correct setup? Yes. > The authentication needs the radsec_server IP address to be present in = clients.conf. Although it is already present in SQL radius client table, = it cannot be recognized.I think authentication request that reaches tcp = 2083 are not associated with SQL client table. Did I miss to update = something?=20 The server has debug output. Read it. Alan DeKok. --Apple-Mail=_1F427550-458E-43BC-B89A-44D1010FE832 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEIUl02elqcIsf1zM0v3SJ0h7dTTMFAmpOVyAACgkQv3SJ0h7d TTN6Sw/9H/ehQp7zCKMVxtX8TqpgRtxzCTs8clL74w3HYUcqOZXsNaRQXR598Nr4 KCvd3gl7eVGMk0W8oaJmdf7wibLaKwg8VTwKR+yRT4mCyRTBwf6qUTfehW2EIWMT /UDTuCVYEg0vY3m6rt7mVFuG4EO4sM3uCNrUhut4cHT4NCu6kzMzUBeLl8OjZ/tn 6vCkbeOcdUQm1AsZRVEhBYE2M8NpXGAQ/jNlwnucXJ5NoRxqX1JES1c1kcqggNvY /Ya0qBVEwoNm9hXW4jRvqY7IbS5Uyu1ThF29KogHey0x5EXbkkMlw7YeWk7KAF+t TWcMwavbzA2yRaumPZ6kLU8KVr6qP7PtdlZVzpbBTCVMUiZX1glF5ixktA70CZxr UDAtJSMQUkrjPTK7B5mP1VT5y1ulo9XhGP9UDl61RcoljUdcRQN6ubJV59ER9AVU +7h4alqpFaHrVdEpxOBiEOpNYlIsD5pr9FF5/EtNZ+T86IVLGsFwD3GUikbgNbBi BP066YVeoZgPhFdSiPBQKOPalT1ma1jVIZMMNLiVX0gYmyiRDt9Xmd7sdWSnXFR+ dZAScH8GUBK56qofIJPGPEIIkOYRHozTL90Y1g3q0NHRQkVKEc7Z/jHt8iR1bjuV 3cSxMdrPRxM2dhvG3E69HjDJ/KudXH/8EzKZjT+nNmOYp6FuiWA= =pmrD -----END PGP SIGNATURE----- --Apple-Mail=_1F427550-458E-43BC-B89A-44D1010FE832-- --===============0112746487297943900== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html --===============0112746487297943900==--