Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion tasks/freeradius-setup-server-add-client-user.xml
Original file line number Diff line number Diff line change
Expand Up @@ -50,7 +50,7 @@ ipaddr = 192.0.2.0/24
secret = testing123-1
}</screen>
<para>You must configure the client to talk to the RADIUS server by using the IP address of the machine running the RADIUS server. The client must use the same secret as configured above in the client section.</para>
<para>You can add more users and configure database.</para></step>
<para>You can add more users and configure the database.</para></step>
</procedure>

</topic>
2 changes: 1 addition & 1 deletion tasks/freeradius-setup-server-create-test-certificates.xml
Original file line number Diff line number Diff line change
Expand Up @@ -29,5 +29,5 @@ in the assembly -->
</info>
<para>Create a set of test certificates in <filename>/etc/raddb/certs</filename>.</para>
<screen>&prompt.sudo; /etc/raddb/certs/bootstrap</screen>
<para>This runs the FreeRADIUS bootstrap script which creates local Certificate Authority (CA), generates server certificates or client certificates, signs the certificates using CA and places the certs or keys in the respective locations for EAP-TLS or PEAP or TTLS.</para>
<para>This runs the FreeRADIUS bootstrap script, which creates a local Certificate Authority (CA), generates server certificates or client certificates, signs the certificates using the CA and places the certs or keys in the respective locations for EAP-TLS or PEAP or TTLS.</para>
</topic>
4 changes: 2 additions & 2 deletions tasks/freeradius-setup-server-deployment.xml
Original file line number Diff line number Diff line change
Expand Up @@ -35,8 +35,8 @@ in the assembly -->
-rw-r----- 1 root radiusd 1704 Jan 27 10:00 server.key
-rw-r----- 1 root radiusd 1200 Jan 27 10:00 server.crt
</screen></step>
<step><para>Delete test users in <filename>/etc/raddb/mods-config/files/authorize</filename>, and <filename>/etc/raddb/users</filename></para></step>
<step><para>Remove the <filename>localhost</filename> with default secret <filename>testing123</filename> in <filename>clients.conf</filename></para></step>
<step><para>Delete test users in <filename>/etc/raddb/mods-config/files/authorize</filename> and <filename>/etc/raddb/users</filename>.</para></step>
<step><para>Remove the <filename>localhost</filename> with the default secret <filename>testing123</filename> in <filename>clients.conf</filename>.</para></step>
<step><para>Update your client blocks to use strong secrets unique to each Network Access Server (NAS).</para></step>
<step><para>Verify the configurations.</para>
<screen>&prompt.sudo; raidusd -C</screen>
Expand Down
2 changes: 1 addition & 1 deletion tasks/freeradius-setup-server-start-server.xml
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ in the assembly -->
</abstract>
</info>
<procedure xml:id="freeradius-setup-server-start-freeradius-server"><title>Starting FreeRADIUS</title>
<step><para>For testing purpose, after creating certificates, start the server in debugging mode as a <literal>root</literal> user.</para>
<step><para>For testing purposes, after creating certificates, start the server in debugging mode as the <literal>root</literal> user.</para>
<screen>&prompt.sudo;radiusd -X
[...]
Listening on auth address * port 1812 bound to server default
Expand Down
4 changes: 2 additions & 2 deletions tasks/freeradius-setup-server-test-authentication.xml
Original file line number Diff line number Diff line change
Expand Up @@ -27,8 +27,8 @@ in the assembly -->
</abstract>
</info>
<section><title>Testing authentication</title>
<para>To test the authentication for the newly added user <literal>bob</literal>,</para>
<para>Open a new terminal, and as an unprivileged user, use the <command>radtest</command> command to log in.</para>
<para>To test the authentication for the newly added user <literal>bob</literal>,
open a new terminal, and as an unprivileged user, use the <command>radtest</command> command to log in.</para>
<screen>&prompt.user; radtest bob hello 127.0.0.1 0 testing123
Sent Access-Request Id 241 from 0.0.0.0:35234 to 127.0.0.1:1812 length 73
User-Name = "bob"
Expand Down