Menu

Adito Radius Plugin

Developers
2009-10-31
2013-05-28
  • Nicolas Michaux

    Nicolas Michaux - 2009-10-31

    Hi all,

    I just commited the Adito RADIUS plugin in the trunk branch. It's the same code as in the embedded branch, modified to compile in the trunk branch. I wrote a build.xml and moved some files to respect the trunk branch hierarchy.

    I renamed the plugin "adito-community-radius" to follow the other plugin's naming convention.

    I wrote some instructions to install and configure it in the README file.

    It works fine with our Radius server, let me know how it works for you…

    Nicolas

     
  • Roel Cuppen

    Roel Cuppen - 2010-08-01

    Hi Nicolas

    Build from the latest trunk.

    Radius works just fine.
    I use Freeradius with Mobile-OTP.

    But fas as I can see , there is a security issue
    When the radius server is down , all requests are permitted (after the retries*timeout)

    When the radius server is up. It is working as expected.

    Roel

     
  • Will Sheldon

    Will Sheldon - 2010-08-01

    This is a known issue. I don't think there are currently any plans to fix it. :-(

     
  • Nicolas Michaux

    Nicolas Michaux - 2010-08-31

    Hi,

    I had a look today to this issue and it seems really simple to solve : we just need to catch the net.sf.jradius.exception.TimeoutException.

    If the server is down, after x retries, you'll receive "Timeout: No Response from RADIUS Server" in the log file and Invalid Credentials in the web interface.

    I commited the patch to the trunk branch, let me know if it works for you.

    Nicolas

     
  • Roel Cuppen

    Roel Cuppen - 2010-08-31

    Hi Nicolas,

    Your fix is working fine.
    Many thanx for making this patch!

    As workaround , i had also used a static user password (default) , behind the radius authentication.
    But with this fix , i can disable static password authentication, and use radius as primairy (and only) authentication.

    Thanks again!

    Roel

     
  • Karsten

    Karsten - 2012-12-20

    I installed adito from trunk and enabled the Radius plugin.
    I have setup freeradius with smsotp and that gives me this error.

    ServletException in '/WEB-INF/jsp/radiusAuth.jspf': ServletException in '/WEB-INF/jsp/tiles/passwordEntry.jspf': net.sf.jradius.packet.attribute.value.StringValue cannot be cast to java.lang.String

    It should precent me with a otp input field.
    Is there any think that I can do to make that work ?

    - Karsten

     

Log in to post a comment.