The RADIUS Server app provides a hook into your ClearOS accounts system for RADIUS clients. This app can be used to allow external devices to authenticate against ClearOS:
If your system does not have this app available, you can install it via the Marketplace.
You can find this feature in the menu system at the following location:
After installing the RADIUS server, you can add client access settings. When we talk of the client we are talking about a remote system that uses the RADIUS server. For instance, if you are configuring RADIUS for wireless access, the wireless access point is the RADIUS client, not your workstation that uses the wireless.
Although there is a folder /etc/raddb/clearos-certs/ containing certificates, these are not currently used. The certificates in use are in /etc/raddb/certs/.
When radius is installed the initial bootstrap certificates are created with a 60 day validity. Windows 10 will object with a “ERROR: TLS Alert read:fatal:access denied” message when these expire. To regenerate them, firstly, if you want, change any key fields you want to contain meaningful data in your certificates such as the organizationName by editing /etc/raddb/certs/ca.cnf and /etc/raddb/certs/server.cnf (and /etc/raddb/certs/client.cnf if you want client certificates). You probably want to change the default_days (certificate validity period) to something greater than 60 days. Then regenerate the certificates with a:
rm -f *.pem *.der *.csr *.crt *.key *.p12 serial* index.txt*
systemctl restart radiusd.service
Every device on your system that uses RADIUS should have client settings configured in ClearOS. The following describes each parameter in detail.
This is the host IP address or hostname of the remote system, for example your wireless access point.
The nickname is just a simple word to describe the client configuration, for example wireless_ap.
This is the shared secret between the server and the client. For security reasons, you should not use the same password as you do for other administrative accounts (mysql, root, etc).
Windows 10 Domain Workstation