Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    FreeRADIUS 3.x package is here! Feedback, please

    Scheduled Pinned Locked Moved pfSense Packages
    60 Posts 14 Posters 22.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • L
      LucaTo
      last edited by

      @jimp:

      you do not have to save a user before it will generate a QR code. Just click the button and it pulls the field values using JavaScript, it doesn't use PHP or anything that loads on save/edit.

      On firefox (55.0.3 64bit) I need to save and re-open,
      On IE (11) no need to save and re-open

      Maybe It's related to the fact that on firefox, from rel. 52, the java plugin was dropped?

      1 Reply Last reply Reply Quote 0
      • F
        Finger79
        last edited by

        Small typo:

        QR Code

        Goolge Authenticator supports adding entries via QR Code. Click the button below to generate a QR Code based on the current settings above when Google Authenticator is active. The image can be saved and shown to a user, but treat it as a secure piece of information and do not send it through an insecure channel such as e-mail.

        1 Reply Last reply Reply Quote 0
        • jimpJ
          jimp Rebel Alliance Developer Netgate
          last edited by

          The QR Code works for others, so it must still be something local to you on your workstation or your browser environment. There is nothing to make it fail before saving. There is no bug there or anything to solve.

          The typo is fixed, it will come in whatever version gets pushed next, didn't warrant a bump just for that.

          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

          Need help fast? Netgate Global Support!

          Do not Chat/PM for help!

          1 Reply Last reply Reply Quote 0
          • D
            doktornotor Banned
            last edited by

            Someone broke the package…

            
            /usr/local/etc/raddb/policy.d/pfs_custom_policies[2]: Reference "${policy.mac-addr-regexp}" not found
            /usr/local/etc/raddb/policy.d/pfs_custom_policies[2]: Parse error expanding ${...} in condition
            
            

            This should fix the breakage and also the policy: https://github.com/pfsense/FreeBSD-ports/pull/412

            1 Reply Last reply Reply Quote 0
            • L
              LucaTo
              last edited by

              @jimp:

              The QR Code works for others, so it must still be something local to you on your workstation or your browser environment. There is nothing to make it fail before saving. There is no bug there or anything to solve.

              The typo is fixed, it will come in whatever version gets pushed next, didn't warrant a bump just for that.

              Yes, I agree, definetely It isn't properly a pfsense issue but… one last thing...

              Now I changed pfsense theme from "dark beta" (grey background) to the standard (white background) and... no more issue in reading qr codes...
              perhaps the gray backgrond color interfere in some way,
              there are many components, the monitor type and resolution, the smartphone optic and image sensor... anyway now It works...
              maybe will be useful for other users  ;)

              1 Reply Last reply Reply Quote 0
              • jimpJ
                jimp Rebel Alliance Developer Netgate
                last edited by

                @doktornotor:

                Someone broke the package…

                
                /usr/local/etc/raddb/policy.d/pfs_custom_policies[2]: Reference "${policy.mac-addr-regexp}" not found
                /usr/local/etc/raddb/policy.d/pfs_custom_policies[2]: Parse error expanding ${...} in condition
                
                

                This should fix the breakage and also the policy: https://github.com/pfsense/FreeBSD-ports/pull/412

                That would be me. Though the syntax I used was the same as what was in the stock policy to rewrite MACs. Odd. Anyhow, I merged your version. Hopefully that fixes it for good.

                Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                Need help fast? Netgate Global Support!

                Do not Chat/PM for help!

                1 Reply Last reply Reply Quote 0
                • D
                  doktornotor Banned
                  last edited by

                  Well actually turns out the syntax was good, just the regex was undefined. I just took the one from /usr/local/etc/raddb/policy.d/canonicalization and copied that in place of the variable to avoid any escaping confusion in the heredoc.

                  1 Reply Last reply Reply Quote 0
                  • F
                    Finger79
                    last edited by

                    @LucaTo:

                    @jimp:

                    The QR Code works for others, so it must still be something local to you on your workstation or your browser environment. There is nothing to make it fail before saving. There is no bug there or anything to solve.

                    The typo is fixed, it will come in whatever version gets pushed next, didn't warrant a bump just for that.

                    Yes, I agree, definetely It is't properly a pfsense issue but… one last thing...

                    Now I changed pfsense theme from "dark beta" (grey background) to the standard (white background) and... no more issue in reading qr codes...
                    perhaps the gray backgrond color interfere in some way,
                    there are many components, the monitor type and resolution, the smartphone optic and image sensor... anyway now It works...
                    maybe will be useful for other users  ;)

                    Interesting.  Is the QR code a transparent image maybe letting the background color bleed through?

                    1 Reply Last reply Reply Quote 0
                    • jimpJ
                      jimp Rebel Alliance Developer Netgate
                      last edited by

                      @Finger79:

                      Interesting.  Is the QR code a transparent image maybe letting the background color bleed through?

                      You can see his screenshot on the previous page. It's still black and white, no transparency. Though it's possible their monitor/display brightness affected it, nothing we can do for that though.

                      Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                      Need help fast? Netgate Global Support!

                      Do not Chat/PM for help!

                      1 Reply Last reply Reply Quote 0
                      • F
                        Finger79
                        last edited by

                        @jimp, random thank you for your hard work on this package.  I'm happy FreeRADIUS 2 has been retired, and 3 is doing very well.

                        I'm still having sporadic issues with my laptop losing connectivity to the outside world as described in this thread, and manually reconnecting the laptop to Wi-Fi fixes it.  I just can't narrow down what the problem is.  It never happened in the FreeRADIUS 2.x package, and it's hard to re-create.

                        It's like the laptop randomly loses the ability to do anything with hostnames, but it can use IPs just fine.  It smells like a DNS issue, but it's weird as heck why I can fix the issue by disconnecting/reconnecting to Wi-Fi and doing a fresh RADIUS query to authorize my laptop to the EAP-TLS network.

                        1 Reply Last reply Reply Quote 0
                        • N
                          NetworkGuy
                          last edited by

                          The MACs normalization routine now works evidently. The "MACs" table for MACAUTH must now be in lowercase for a Access-Accept, where previously, v.9-v.12 or so, we determined I needed UPPERCASE.

                          1 Reply Last reply Reply Quote 0
                          • P
                            ProxyMoron
                            last edited by

                            Hi,
                              Im having trouble getting this working using 2.4.0-RC (amd64) built on Tue Aug 22 09:00:41 and freeradius3 - 0.15.1.

                            I'm following the instructions here - https://blog.vonhewitt.com/2017/08/pfsense-openvpn-setup-with-freeradius3p2.html but when i goto diagnostics and test with the pin + auth code - i get login failed every time in Diagnostics\Authentication with FreeRaidus Auth selected.

                            In the syslog i get (0) Login incorrect (Failed retrieving values required to evaluate condition): [testuser] (from client OpenVPN port 0)

                            I checked the time offset, double checked the pin, tried both Google Auth and Lastpass Auth (both of which seemed to struggle to scan the Barcode by the way (Chrome + Edge) - and im not 100% sure its scanned correctly), regenerated the Init-Secret and scanned again etc, but it fails every time.

                            Its a pretty basic setup and is a brand new install - any ideas here?

                            1 Reply Last reply Reply Quote 0
                            • jimpJ
                              jimp Rebel Alliance Developer Netgate
                              last edited by

                              Locking this as it's grown past its usefulness.

                              Please start new, separate threads for issues.

                              Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                              Need help fast? Netgate Global Support!

                              Do not Chat/PM for help!

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.