FreeRADIUS MSCHAPv2 compatibility
Hi i've set up a FreeRADIUS server with OpenLDAP in a docker compose environment for wifi authentication. Nebula uses MSCHAPv2, which only supports cleartext passwords or nt hashes, which are insecure. What's the best solution to use FreeRADIUS with an user directory like OpenLDAP.
//EDIT: Have a look at http://deployingradius.com/documents/protocols/compatibility.html
Thanks!
//EDIT: Have a look at http://deployingradius.com/documents/protocols/compatibility.html
Thanks!
0
All Replies
-
Hi, @baba
Nebula use PEAP with EAP-MSCHAPv2, which would be secure as the MSCHAPv2 messages are sent through a TLS-protected tunnel.
And Nebula only supports an external RADIUS server to authenticate for now, LDAP server would be unable to work.
If you're interested, the below FAQ is tip to set up 802.1x authentication with an external radius server on Nebula:
Thank you.
0
Categories
- 7.7K All Categories
- 1.6K Nebula
- 53 Nebula Ideas
- 53 Nebula Status and Incidents
- 4.3K Security
- 215 Security Ideas
- 900 Switch
- 40 Switch Ideas
- 792 WirelessLAN
- 14 WLAN Ideas
- 5K Consumer Product
- 129 Service & License
- 260 News and Release
- 49 Security Advisories
- 6 Education Center
- 573 FAQ
- 273 Nebula FAQ
- 132 Security FAQ
- 73 Switch FAQ
- 72 WirelessLAN FAQ
- 7 Consumer Product FAQ
- Documents
- 34 Nebula Monthly Express
- 67 About Community
- 40 Security Highlight