Hey Andrew,

The guide you are following is 100% allright. Works for me (All my freeradius servers are bound to ipa)

In regards to syntax - Please try with GUI. This is how I did that.

In regard to macosx and wifi issues. Please check if the freeradius certificate did not expire(look for issues there)

BR
Maciej

On Tue, Nov 14, 2017 at 10:10 PM, Andrew Meyer via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:
After all the emails (thank you for your help) I have most of my Mac OS X clients authenticating to FreeIPA over wireless.  Clients running on a 2014 or newer 10.12.5 and up won't work.  I suspect this has to do with the TLS version.  

Tell me if I'm approaching this the right way.

I am trying to apply a certificate FROM FreeIPA to FreeRADIUS.  I am also trying to register the service within FreeIPA but strugglging with some of the syntax.

I have been following this:



I'm having some trouble adding the privileges and roles:
[andrew.meyer@radius01 ~]$ ipa privilege-add-permission 'Radius service' --permission='Radius Service'
  Privilege name: Radius Service
  Description: Privileges needed to allow radiusd servers to operate
  Failed members:
    permission: Radius Service: permission not found
-----------------------------
Number of permissions added 0
-----------------------------
[andrew.meyer@radius01 ~]$ ipa privilege-add-permission 'Radius service' --permission='Radius service'
  Privilege name: Radius Service
  Description: Privileges needed to allow radiusd servers to operate
  Failed members:
    permission: Radius service: permission not found
-----------------------------
Number of permissions added 0
-----------------------------
[andrew.meyer@radius01 ~]$ ipa role-add 'Radius server' --desc="Radius server role"
--------------------------
Added role "Radius server"
--------------------------
  Role name: Radius server
  Description: Radius server role
[andrew.meyer@radius01 ~]$ ipa role-add-privilege --privileges="Radius services" 'Radius server'
  Role name: Radius server
  Description: Radius server role
  Failed members:
    privilege: Radius services: privilege not found
----------------------------
Number of privileges added 0
----------------------------
[andrew.meyer@radius01 ~]$

_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org




--
Best regards

Maciej Drobniuch
Network Security Engineer
Collective-Sense,LLC