On 6 Feb 2018, at 10:16, barrykfl--- via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:

Hi :

Anyone has exp to use freeipa 4.0 above as radius server ? e.g want wifi
use radius everyone carry ldap password.
How to implement ? need special plugin ? seem it need new
attribute can generate harsh password and syn with LDAP together ?

Hello Barry!
Yes, I’ve successfully set up RADIUS integration with MSCHAPv2, following these two blog posts:


I’ve enhanced my setup a little by using a kerberos keytab instead of a password for the RADIUS service. If you do that, don’t forget to add the keytab to the GSSProxy configuration for it to be renewed automatically.

Aljaž Srebrnič a.k.a g5pw
My public key:  https://g5pw.me/key
Key fingerprint = 2109 8131 60CA 01AF 75EC  01BF E140 E1EE A54E E677