FreeRADIUS for Windows v3.0.22 SERVER EDITION © JUNE 2020 1 FreeRADIUS Server for Windows 3.0.22 (64-bit) Thank you for choosing FreeRADIUS Server for Windows. Build Options OpenSSL 1.1.1g (TLS 1.3) ODBC support (unixODBC 2.3.7) OpenLDAP 2.4.50 IPv6 “To the best of our knowledge, this is the first and only Windows native port of FreeRADIUS Server. This contribution started with FreeRADIUS 2.2.6 and continues to present.”. Tools eapol_test Who uses FreeRADIUS for Windows Many organisations and companies around the globe! Notes . This product is made available ‘gratis’ (free of charge). The source code can be downloaded from the FreeRADIUS Project, http://freeradius.org/. Alternatively, it can be requested via email. A quick and simple registration is required in order to receive regular updates. 2 Server Start-Up Go to: Start - Programs - FreeRADIUS 3.0.22 – Start RADIUS Server (Debug) Sanity Tests Go to: Start - Programs - FreeRADIUS 3.0.22 - RADIUS Command Prompt Run the following scripts to test if the server is working properly: a) radtestwin.cmd b) radtest-digest.cmd c) radeapclient.cmd d) radtest-sspi.cmd 3 Server Version Info FR Server Output 4 EAP METHODS The 'eapol_test' tool can be used to test different EAP methods. Examples EAP-FAST eapol_test -a 127.0.0.1 -p 1812 -s testing123 -c eap-fast.conf FR Server Output 5 eapol_test Output EAP-PWD eapol_test -a 127.0.0.1 -p 1812 -s testing123 -c eap-pwd.conf 6 eapol_test Output 7 SSPI Windows AD (Active Directory) users authentication. It supports NTLM & Kerberos. AD Domain Controller Details AD Domain Controller Not Available Examples radclient -x -s -r 1 -6 -f radclient-sspi.conf [::1]:1812 auth testing123 8 radclient -x -s -r 1 -6 -f radclient-sspi.conf [::1]:1812 auth testing123 Successful Credential Validation Disabled User Account 9 LDAP a) Install and set up OpenLDAP Server b) Edit sites-enabled/default file: authorize { ... ... ldap ... } authenticate { ... ... Auth-Type LDAP { ldap } ... } c) Edit mods-enabled/ldap file and adjust some values accordingly (e.g. server name, base dn, etc) d) Start OpenLDAP Server FR LDAP Module 10 SQL MS SQL SERVER Make sure that MS SQL server service is up and running and it can be accessed. (FreeTDS and unixODBC utilities can be used to test connection to MS SQL Servers.) a) Create ‘radius’ database b) Execute all SQL scripts under the etc/raddb/sql/mssql folder c) Edit etc/raddb/sql.conf file: sql { # # Set the database to one of: # # mysql, mssql, oracle, postgresql # database = "unixodbc" driver = "rlm_sql_${database}" server = "MSSQLTestServer" login = "testsqluser" password = "xxxx" ... } d) Edit etc/raddb/sites-enabled/default file: authorize { ... sql ... } accounting { ... sql ... } 11 SQL Server Management Studio 12 Testing MS SQL Server Connection (ODBC) SQL Module Instance 13 .