On 6 Feb 2018, at 10:16, barrykfl--- via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:

Hi :

Anyone has exp to use freeipa 4.0 above as radius server ? e.g want wifi
use radius everyone carry ldap password.
How to implement ? need special plugin ? seem it need new
attribute can generate harsh password and syn with LDAP together ?

Hello Barry!
Yes, I’ve successfully set up RADIUS integration with MSCHAPv2, following these two blog posts:

http://firstyear.id.au/blog/html/2015/07/06/FreeIPA:_Giving_permissions_to_service_accounts..html
http://firstyear.id.au/blog/html/2016/01/13/FreeRADIUS:_Using_mschapv2_with_freeipa.html

I’ve enhanced my setup a little by using a kerberos keytab instead of a password for the RADIUS service. If you do that, don’t forget to add the keytab to the GSSProxy configuration for it to be renewed automatically.

--
Aljaž Srebrnič a.k.a g5pw
My public key:  https://g5pw.me/key
Key fingerprint = 2109 8131 60CA 01AF 75EC  01BF E140 E1EE A54E E677