freeradius-clinet that supports PAM & PEAP/TLS-EAP

FreeRADIUS / freeradius-client

A BSD licenced RADIUS client library

http://freeradius.org/freeradius-client/

Other

141 stars 100 forks source link

freeradius-clinet that supports PAM & PEAP/TLS-EAP #86

Closed mlnx-omrigi closed 6 years ago

mlnx-omrigi commented 6 years ago

Hi, Is there any way to use this freeradius-client with Linux PAM and TLS connection? I saw that TLS is not supported in pam_radius_auth, so I'm asking in this repository because I saw that freeradius-client does support TLS.

Thanks, Omri.

alandekok commented 6 years ago

freeradius-client doesn't support TLS. The PAM module doesn't support TLS either.

Realistically, it's better to use UDP for local networks. If you need to send RADIUS packets across the wider Internet, then you need a full-featured RADIUS server. There's a lot more than just TLS involved. e.g. fail-over, load-balancing, statistics, etc.