Commit graph

166 commits

Author SHA1 Message Date
Franco Fichtner
0fe62ae500 net/freeradius: wrap up version 2026-02-03 15:30:08 +01:00
Kota Shiratsuka
c2c49fb1a1
FreeRADIUS: add TLS maximum version setting for EAP (#5175) 2026-01-30 19:54:11 +01:00
Franco Fichtner
cb7b2aafe6 net/freeradius: new version 2026-01-20 12:47:13 +01:00
Joerg Werner
9c6fe3082a net/freeradius: EAP: Allow user to select minimum TLS Version of 1.3; closes #5140 2026-01-20 12:35:49 +01:00
Franco Fichtner
d2c5b7acc2 net/freeradius: basic model style 2026-01-19 04:34:04 +01:00
schreibubi
4b80067284
net/freeradius: Change TLS max version to 1.3 (#4883) 2025-12-17 10:12:36 +01:00
Severin Schüller
fb27dc4444
net/freeradius: Add option to enable EAP-PWD (#4093)
* Add option to enable EAP-PWD

* also make server_id configurable
2025-12-17 09:27:19 +01:00
Franco Fichtner
4e967c787d net/freeradius: modify VLAN fallback logic #5050
While it's nice to constrain this it's also very inflexible.
With fallback disabled we can retain values in tunnel pw and
VLAN ID.  Enabling it without these options may be weird, but
not a large problem.  Template was rearranged to generate
the most logic outcome.

Some due maintenance sprinkled on top.
2025-11-29 08:51:48 +01:00
Franco Fichtner
5ca28c8447 net/freeradius: proposal for #5050 2025-11-29 08:24:56 +01:00
Franco Fichtner
001fa57d90 net/freeradius: cleanups for next version 2025-11-04 14:31:00 +01:00
Robert Resch
370bc89493
net/freeradius: add fallback Tunnel-Password field (#4983) 2025-11-04 14:28:39 +01:00
Michael
8b3741f591
net/freeradius: Add LDAP Groups (#4989) 2025-10-22 17:02:44 +02:00
Tobias Perschon
ddbb31c579
net/freeradius: add Tunnel-Password field to radius user (#4235) 2025-10-16 13:03:24 +02:00
Franco Fichtner
8a43cb1c3f net/freeradius: bump revision 2025-09-06 19:02:12 +02:00
Monviech
ceace150e3
bootgrid: Sweep rowcount as default has been increased in baa1730b1a (#4916) 2025-08-29 14:40:53 +02:00
Franco Fichtner
f240ec0fce plugins: run style-model 2025-07-02 10:46:07 +02:00
Monviech
089aaa256d
mvc: Replace camelCase API notation with snake_case, some more spots that were missed (#4768) 2025-06-23 17:32:56 +02:00
Monviech
4b4ec29eca
mvc: Replace camelCase API notation with snake_case (#4767)
* mvc: Replace camelCase API notation with snake_case

* mvc: Replace camelCase API notation with snake_case, fixed some special cases in www/caddy
2025-06-23 14:45:51 +02:00
Franco Fichtner
f76eecd3b7 net/freeradius: new version 2025-01-14 14:49:42 +01:00
RasAlGhul
2f4e63b03b
net/freeradius: EAP-TLS with multiple CAs (#4381)
* controller eap: changed from dropdown to select_multiple

* model eap: add mulitple option to CertificateField type ca

* script generate_certs: Multiple comma-separated refid values are possible. Use explode() and process them with a foreach loop
2025-01-14 10:51:41 +01:00
Monviech
be90096c40 net/freeradius: Remove sessionClose() 2025-01-10 10:22:26 +01:00
Franco Fichtner
5b02c20778 net/freeradius: clear revision 2024-10-22 10:50:06 +02:00
Patrick M. Hausen
e0838b9ef9 net/freeradius add require_message_authenticator client option (#4306)
It is recommended for RADIUS clients to use a message authenticator for all
requests to protect against the BlastRADIUS attack.

PR: https://forum.opnsense.org/index.php?topic=42094.msg207448
2024-10-18 11:01:16 +02:00
Franco Fichtner
3304711c9d net/freeradius: bump revision 2024-10-16 07:46:57 +02:00
captainko
a66cc228f8 net/freeradius: Allow & as a password character #4115 2024-10-11 10:25:48 +02:00
Philipp Nieting
1a4a15de1b
net/freeradius: Added remote syslog support (#3990) (#4172) 2024-08-12 10:42:21 +02:00
Franco Fichtner
317b84c0b9 net/freeradius: wrap up new version 2024-07-23 11:31:49 +02:00
Chris Helming
44abf3ff22
allow : in FreeRADIUS user and password (#3976) 2024-07-22 12:47:34 +02:00
Franco Fichtner
57ae4626a2 net/freeradius: next version 2024-04-03 12:32:03 +02:00
stuart-mclaren
3835878b5f
net/freeradius: Support NT hash of user password (#3828)
* net/freeradius: Support NT hash of user password

To improve security provide an "advanced" option to avoid storing
users' radius passwords in plaintext.

The default behaviour is unchanged.

Tested using an openwrt access point as a client with the opnsense
freeradius plugin set to use PEAP.

Compare: https://github.com/pfsense/FreeBSD-ports/pull/822

* net/freeradius: Bump user model version

To reflect NT password hash change.

---------

Co-authored-by: Stuart McLaren <stuart-mclaren@users.noreply.github.com>
2024-03-29 08:37:32 +01:00
Franco Fichtner
83ef7e0687 net/freeradius: style updates 2022-11-15 08:55:50 +01:00
clanto007
943924c0ff
net/freeradius: Proxy Configuration Page (#3142) 2022-11-15 08:34:13 +01:00
Ad Schellevis
b6a9b0f554 net/freeradius - add missing syslog local target 2022-11-09 14:26:27 +01:00
Franco Fichtner
b5f0d60839 plugins: move logfomats to syslog dir #5877 2022-11-04 09:57:41 +01:00
Franco Fichtner
2fe6cc4239 net/freeradius: bump revision 2022-11-02 09:48:11 +01:00
Franco Fichtner
21bb530c6d net/freeradius: use NAME_setup
PR: https://github.com/opnsense/core/issues/5917
2022-10-21 10:11:06 +02:00
Franco Fichtner
302d2832ac net/freeradius: style update 2022-10-21 09:42:52 +02:00
Franco Fichtner
c53553ba69 net/freeradius: cleanup 2022-10-04 09:36:21 +02:00
clanto007
aadba7a7b9
net/freeradius: add description for start and stop actions (#3118)
Add description for start and stop actions so it can be used in automations.
2022-09-27 15:08:21 +02:00
clanto007
49c8308353
net\freeradius Certificate for LDAP Connection (#3061) 2022-09-26 20:48:21 +02:00
Michael
d27499dbcc
net/freeradius: Remove TTLS-GTC from default eap type (#3052) 2022-07-27 08:57:27 +02:00
Franco Fichtner
ff9a7211aa net/freeradius: bump after fix 2022-03-16 08:10:38 +01:00
c-goes
b0fcd82305
net/freeradius: Fix template for sites-enabled-inner-tunnel (#2881) 2022-03-07 11:40:12 +01:00
Michael
acabf82813
Update sites-enabled-inner-tunnel (#2835) 2022-02-15 21:15:29 +01:00
Michael
18225b7a4a
net/freeradius: Allow LDAP in inner-tunnel (#2626) 2022-02-15 10:00:21 +01:00
Alanin
ecd6015598
net/freeradius: options for fallback vlan (#2566) 2022-01-13 09:17:21 +01:00
Franco Fichtner
1a86d52df8 net/freeradius: bump revision for restart description change 2022-01-11 08:56:59 +01:00
Jeffrey
0b05f1d71b
add description for restart action (#2718)
Add description for restart action so it can be used in automations (e.g. after acme cert update, restart freeradius which uses it)
2021-12-25 13:18:17 +01:00
Franco Fichtner
d918baab46 net/freeradius: tab 2021-12-08 07:51:08 +01:00
Michael
5320722aba
net/freeradius: Fix bad default (#2687) 2021-12-07 15:40:35 +01:00