FreeRADIUS MSCHAPv2 compatibility
Hi i've set up a FreeRADIUS server with OpenLDAP in a docker compose environment for wifi authentication. Nebula uses MSCHAPv2, which only supports cleartext passwords or nt hashes, which are insecure. What's the best solution to use FreeRADIUS with an user directory like OpenLDAP.
//EDIT: Have a look at http://deployingradius.com/documents/protocols/compatibility.html
Thanks!
//EDIT: Have a look at http://deployingradius.com/documents/protocols/compatibility.html
Thanks!
0
All Replies
-
Hi, @baba
Nebula use PEAP with EAP-MSCHAPv2, which would be secure as the MSCHAPv2 messages are sent through a TLS-protected tunnel.
And Nebula only supports an external RADIUS server to authenticate for now, LDAP server would be unable to work.
If you're interested, the below FAQ is tip to set up 802.1x authentication with an external radius server on Nebula:
Thank you.
0
Categories
- All Categories
- 185 Beta Program
- 1.7K Nebula
- 90 Nebula Ideas
- 63 Nebula Status and Incidents
- 4.7K Security
- 236 Security Ideas
- 1.1K Switch
- 51 Switch Ideas
- 916 WirelessLAN
- 27 WLAN Ideas
- 5.4K Consumer Product
- 174 Service & License
- 296 News and Release
- 65 Security Advisories
- 14 Education Center
- 991 FAQ
- 433 Nebula FAQ
- 255 Security FAQ
- 100 Switch FAQ
- 115 WirelessLAN FAQ
- 22 Consumer Product FAQ
- 66 Service & License FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 68 About Community
- 52 Security Highlight