DaloRADIUS. Almalinux 8. FreeRADIUS 3 + DaloRADIUS - История изменений

Cless в 10:05, 4 сентября 2023

2023-09-04T10:05:11Z

← Предыдущая		Версия 10:05, 4 сентября 2023
Строка 1012:		Строка 1012:
	You should get a message telling you that the certificate has been installed. Your phone will now trust certificates signed by your Certification Authority.		You should get a message telling you that the certificate has been installed. Your phone will now trust certificates signed by your Certification Authority.

	==== Connect to your wi-fi ====		==== Connect to your WI-FI ====
	Go your network configuration section and select the wi-fi section.		Go your network configuration section and select the wi-fi section.

Cless в 08:21, 4 сентября 2023

2023-09-04T08:21:45Z

← Предыдущая		Версия 08:21, 4 сентября 2023
Строка 228:		Строка 228:
	<code>cd /etc/raddb/certs</code>		<code>cd /etc/raddb/certs</code>

	Create necessary config files		Create necessary config files<blockquote>All these files are exist in the backuped directory '''/etc/raddb/certs.ORIG''', but for the understanding of the proccess of the generating certs '''we will create them manually'''.</blockquote>Server cert<code>nano /etc/raddb/certs/server.cnf</code><blockquote>Pay attention to the settings:

	<code>nano /etc/raddb/certs/server.cnf</code><blockquote>Pay attention to the settings:

	...		...
Строка 343:		Строка 341:
	otherName.0 = 1.3.6.1.5.5.7.8.8;FORMAT:UTF8,UTF8:*.example.com		otherName.0 = 1.3.6.1.5.5.7.8.8;FORMAT:UTF8,UTF8:*.example.com
	</syntaxhighlight>		</syntaxhighlight>

			CA cert

	<code>nano /etc/raddb/certs/ca.cnf</code><blockquote>		<code>nano /etc/raddb/certs/ca.cnf</code><blockquote>
Строка 445:		Строка 445:

	</syntaxhighlight>		</syntaxhighlight>
	We are not going to use Client Certs, but still you can leave it as an example.		We are not going to use Client Certs, but still you can leave it as an example. Moreover, it's necessary in order to the file '''Bootstrap''' working properly.

	<code>nano /etc/raddb/certs/client.cnf</code><blockquote>		<code>nano /etc/raddb/certs/client.cnf</code><blockquote>
Строка 629:		Строка 629:

	</syntaxhighlight>		</syntaxhighlight>
	Script, which ~~will generate~~ certs		Script '''Bootstrap''', which generates certs

	<code>nano /etc/raddb/certs/bootstrap</code><syntaxhighlight lang="bash">		<code>nano /etc/raddb/certs/bootstrap</code><syntaxhighlight lang="bash">
Строка 949:		Строка 949:

	</syntaxhighlight>		</syntaxhighlight>
	Bootstrap execute permission		Set Bootstrap file execute permission

	<code>chmod +x ./bootstrap</code>		<code>chmod +x ./bootstrap</code>
Строка 957:		Строка 957:
	<code>openssl dhparam -out dh 2048</code>		<code>openssl dhparam -out dh 2048</code>

	Run certs ~~generate~~		Run certs generation<blockquote>There must be no errors on the output</blockquote><code>./bootstrap</code>

	<code>./bootstrap</code>

	You will get new files, including some important ones: '''ca.pem''', '''server.pem'''.		You will get new files, including some important ones: '''ca.pem''', '''server.pem'''.
Строка 965:		Строка 963:
	Edit freeradius EAP settings		Edit freeradius EAP settings

	<code>nano /etc/raddb/mods-enabled/eap</code>		<code>nano /etc/raddb/mods-enabled/eap</code><blockquote>'''private_key_password = PassWord''' - This password must be the same as the password in the '''server.cnf'''</blockquote>
	...		...
	# Edit		# Edit
Строка 977:		Строка 975:
	dh_file = '''/etc/raddb/certs/dh'''		dh_file = '''/etc/raddb/certs/dh'''
	...		...
	~~Restart~~ freeradius service<code>systemctl restart radiusd</code>		Check freeradius manually

			<code>systemctl stop radiusd</code>

			<code>radius -X</code>

			If there're no errors, restart freeradius service

			<code>systemctl restart radiusd</code>

			Copy '''/etc/raddb/certs/ca.pem''' from the Radius server to your Desktop device.

	=== Client Android ===		=== Client Android ===
	~~Install the CA certificate~~

	You phone now needs to be told to trust the certificate that the RADIUS server is presenting. ~~This is actually fairly simple except for the first part. You are about to encounter at first hand one of the most difficult parts of establishing a trusted connection.~~ Somehow you have to get the ca.pem CA certificate onto your phone and you have to do it in a trusted fashion. There are several possible ways to do this:		==== Install the CA certificate to your phone ====
			You phone now needs to be told to trust the certificate that the RADIUS server is presenting.

			Somehow you have to get the '''ca.pem''' CA certificate onto your phone and you have to do it in a trusted fashion.

			There are several possible ways to do this:

	* Link your phone to your computer via a USB cable and transfer the file		* Link your phone to your computer via a USB cable and transfer the file
	* Write the certificate file to an SD card		* Write the certificate file to an SD card
			*Use a trusted messaging service such as WhatsApp to transfer the file.

	Once you have it over to your phone go to your settings menu and select		Once you have it over to your phone go to your settings menu and select:

	<code>Security -> Advanced -> Encryption and Credentials -> Install a certificate -> Wi-Fi certificate</code>		<code>Security -> Advanced -> Encryption and Credentials -> Install a certificate -> Wi-Fi certificate</code>

	All being well you will then be presented with a file chooser with your ca.pem in it. Select the file and give the certificate a name when asked by the pop-up. Choose something obvious like ~~“Corporate Wifi”~~. Click on OK. You should get a message telling you that the certificate has been installed. Your phone will now trust certificates signed by your Certification Authority.		All being well you will then be presented with a file chooser with your ca.pem in it. Select the file and give the certificate a name when asked by the pop-up.

			Choose something obvious like “'''Dubki WIFI Radius''' '''rad03.d.loc'''”.

			Click on OK.

			You should get a message telling you that the certificate has been installed. Your phone will now trust certificates signed by your Certification Authority.

			==== Connect to your wi-fi ====
			Go your network configuration section and select the wi-fi section.

			You should see the wi-fi network you want displayed (assuming that the network side of things is all set up).

	~~Connect to your wi-fi~~		Click on this network.

	~~Go your network configuration section and select the wi-fi section. You should see the wi-fi network you want displayed (assuming that the network side of things is all set up). Click on this network.~~ You will be presented with a screen with a number of incomprehensible questions:		You will be presented with a screen with a number of incomprehensible questions:

	* For ~~“EAP method”~~ select “'''PEAP'''”		* For “<u>EAP method</u>” select “'''PEAP'''”
	* For ~~“Phase~~ 2 authentication method” select “'''MSCHAPV2'''”		* For “<u>Phase 2 authentication method” select</u> “'''MSCHAPV2'''”
	* For ~~“CA certificate”~~ select the name you gave the CA certificate		* For “<u>CA certificate</u>” select the name you gave the CA certificate, in our case: "'''Dubki WIFI Radius rad03.d.loc'''"
	* For ~~“Domain”~~ select the commonName value you set in the server.cnf file ~~(“server1~~.~~grabbit-radius.com”)~~.		* For “<u>Domain</u>” select the commonName value you set in the '''server.cnf''' file at the Radius server, in our case: '''rad03.d.loc'''
	* Fill in your username and password under ~~“Identity”~~ and ~~“Password”~~.		* Fill in your username and password under “<u>Identity</u>” and “<u>Password</u>”: these are the '''Login''' and '''Pass''' of any user at your Freeradius Server.
	* Press ~~“Save”~~		* Press “'''Save'''”

	All being well you will connect securely to the wifi. Subsequent connections will be automatic.		All being well you will connect securely to the wifi. Subsequent connections will be automatic.
	__БЕЗ_РЕДАКТИРОВАНИЯ_РАЗДЕЛА__		__БЕЗ_РЕДАКТИРОВАНИЯ_РАЗДЕЛА__
	[[Категория:AlmaLinux 8]]		[[Категория:AlmaLinux 8]]

Cless в 08:01, 4 сентября 2023

2023-09-04T08:01:07Z

Внесённые изменения

Cless в 07:43, 4 сентября 2023

2023-09-04T07:43:19Z

Внесённые изменения

Cless в 10:19, 30 августа 2023

2023-08-30T10:19:41Z

← Предыдущая		Версия 10:19, 30 августа 2023
Строка 74:		Строка 74:
	<code>mysql -u root -p radius < /etc/raddb/mods-config/sql/main/mysql/schema.sql</code>		<code>mysql -u root -p radius < /etc/raddb/mods-config/sql/main/mysql/schema.sql</code>

	<code>nano /etc/raddb/sites-available/default</code><blockquote>РАСКОММЕНТИРУЕМ ВСЕ "sql", СЛЕДУЮЩИЕ СТРОКИ ДЛЯ ПРИМЕРА</blockquote>		<code>nano /etc/raddb/sites-available/default</code><blockquote>РАСКОММЕНТИРУЕМ ВСЕ "sql" (а также исправляем "-sql" на "sql"), СЛЕДУЮЩИЕ СТРОКИ ДЛЯ ПРИМЕРА</blockquote>
	...		...
	authorize {		authorize {
Строка 87:		Строка 87:
	}		}
	...		...
	<code>nano /etc/raddb/sites-available/inner-tunnel</code><blockquote>РАСКОММЕНТИРУЕМ ВСЕ "sql", СЛЕДУЮЩИЕ СТРОКИ ДЛЯ ПРИМЕРА</blockquote>		<code>nano /etc/raddb/sites-available/inner-tunnel</code><blockquote>РАСКОММЕНТИРУЕМ ВСЕ "sql" (а также исправляем "-sql" на "sql"), СЛЕДУЮЩИЕ СТРОКИ ДЛЯ ПРИМЕРА</blockquote>
	...		...
	authorize {		authorize {
Строка 203:		Строка 203:
	[[Файл:Daloradius+mikrotik-ONLY-hotspot rate-limit.jpg\|без\|мини]]		[[Файл:Daloradius+mikrotik-ONLY-hotspot rate-limit.jpg\|без\|мини]]
	__БЕЗ_РЕДАКТИРОВАНИЯ_РАЗДЕЛА__		__БЕЗ_РЕДАКТИРОВАНИЯ_РАЗДЕЛА__
			[[Категория:AlmaLinux 8]]

Cless: Cless переименовал страницу DaloRADIUS. Oracle Linux 8. FreeRADIUS 3 + DaloRADIUS в DaloRADIUS. Almalinux 8. FreeRADIUS 3 + DaloRADIUS без оставления перенаправления

2023-08-30T10:18:02Z

Cless переименовал страницу DaloRADIUS. Oracle Linux 8. FreeRADIUS 3 + DaloRADIUS в DaloRADIUS. Almalinux 8. FreeRADIUS 3 + DaloRADIUS без оставления перенаправления

← Предыдущая	Версия 10:18, 30 августа 2023
(нет различий)

Cless в 09:55, 30 августа 2023

2023-08-30T09:55:37Z

← Предыдущая		Версия 09:55, 30 августа 2023
Строка 74:		Строка 74:
	<code>mysql -u root -p radius < /etc/raddb/mods-config/sql/main/mysql/schema.sql</code>		<code>mysql -u root -p radius < /etc/raddb/mods-config/sql/main/mysql/schema.sql</code>

			<code>nano /etc/raddb/sites-available/default</code><blockquote>РАСКОММЕНТИРУЕМ ВСЕ "sql", СЛЕДУЮЩИЕ СТРОКИ ДЛЯ ПРИМЕРА</blockquote>
			...
			authorize {
			sql
			}

			accounting {
			sql
			}
			session {
			sql
			}
			...
			<code>nano /etc/raddb/sites-available/inner-tunnel</code><blockquote>РАСКОММЕНТИРУЕМ ВСЕ "sql", СЛЕДУЮЩИЕ СТРОКИ ДЛЯ ПРИМЕРА</blockquote>
			...
			authorize {
			sql
			}
			session {
			sql
			}
			...
	<code>ln -s /etc/raddb/mods-available/sql /etc/raddb/mods-enabled/</code>		<code>ln -s /etc/raddb/mods-available/sql /etc/raddb/mods-enabled/</code>

Строка 115:		Строка 137:
	}		}

			...
			# Comment relative path and add absolute path
			#$INCLUDE ${modconfdir}/${.:name}/main/${dialect}/queries.conf
			$INCLUDE /etc/raddb/mods-config/sql/main/mysql/queries.conf
	...		...
	<code>chgrp -h radiusd /etc/raddb/mods-enabled/sql</code>		<code>chgrp -h radiusd /etc/raddb/mods-enabled/sql</code>

Cless в 10:17, 1 апреля 2023

2023-04-01T10:17:36Z

← Предыдущая		Версия 10:17, 1 апреля 2023
Строка 176:		Строка 176:
	=== Настройки скорости клиента в случае подключения через Mikrotik Hotspot ===		=== Настройки скорости клиента в случае подключения через Mikrotik Hotspot ===
	[[Файл:Daloradius+mikrotik-ONLY-hotspot rate-limit.jpg\|без\|мини]]		[[Файл:Daloradius+mikrotik-ONLY-hotspot rate-limit.jpg\|без\|мини]]
			__БЕЗ_РЕДАКТИРОВАНИЯ_РАЗДЕЛА__

Cless: /* Utils install */

2023-04-01T10:17:17Z

Utils install

← Предыдущая		Версия 10:17, 1 апреля 2023
Строка 15:		Строка 15:
	<code>systemctl disable firewalld</code>		<code>systemctl disable firewalld</code>

	=== Utils ~~install~~ ===		=== Utils ===
	<code>dnf install -y nano wget mc</code>		<code>dnf install -y nano wget mc</code>

Cless в 08:37, 1 апреля 2023

2023-04-01T08:37:05Z

← Предыдущая		Версия 08:37, 1 апреля 2023
Строка 126:		Строка 126:
	<code>dnf -y install unzip</code>		<code>dnf -y install unzip</code>

	<code>unzip ~~master~~.zip</code>		<code>unzip 1.3.zip</code>

	<code>sudo mv daloradius-~~master~~/ /var/www/html/daloradius</code>		<code>sudo mv daloradius-1.3/ /var/www/html/daloradius</code>

	<code>cd /var/www/html/daloradius</code>		<code>cd /var/www/html/daloradius</code>