FreeRadius LDAP with GSuite LDAP Help

[msa1878]

Good evening!

Reaching out for help once again...

We use Gsuite for Education with a Pfsense and captive portal and authentication against Gsuite. All working as it should.

We are needing a radius server for an add-on appliance called EasyNac by Infoexpress for network access control, which requires an Active Directory or a radius server. Since we don't use any AD servers, A radius server will be used instead.

I have installed Freeradius on the Pfsense, and it is working as designed. I was able to authenticate against a local username on the Pfsense box via radius.

As of right now, we have the PF captive portal using Stunnel to authenticate through the GSuite LDAP, and it works. I saw somewhere you can bind the FreeRadius to the Stunnel but I can't find instructions for that.

I cannot get Freeradius to authenticate Gsuite LDAPS. looked all around for direct setup instructions for setting this and I had no luck yet finding anything to help.

Any suggests?

[NollipfSense]

@msa1878 said in FreeRadius LDAP with GSuite LDAP Help:

bind the FreeRadius to the Stunnel

Did you look at these:

https://docs.netgate.com/pfsense/en/latest/packages/stunnel.html

https://docs.netgate.com/pfsense/en/latest/packages/freeradius.html

[msa1878]

@nollipfsense said in FreeRadius LDAP with GSuite LDAP Help:

https://docs.netgate.com/pfsense/en/latest/packages/stunnel.html

Yes, I have seen all of these... but I can't find any info on how to bind Freeradius to an already functioning Gsuite Stunnel configuration.

[stephenw10]

Stunnel listens on localhost and forwards requests to dap.google.com so I would expect to point Freeradius at localhost on the appropriate port. As you do for LDAP auth directly:

https://docs.netgate.com/pfsense/en/latest/recipes/auth-google-gsuite.html#configure-ldap-authentication-on-pfsense-software