@freeradius

The worlds most popular RADIUS server.

 Everywhere
freeradius.org
Joined October 2009
  • Tweets511
  • Following63
  • Followers853
17Media
In-depth documentation for nearly all modules is now available at networkradius.com/doc/3.0.7/…
3
4
9
freeradius retweeted
Damien Van Achter@davanacFeb 19
Un ancien physicien canadien contrôle l'authentification de 100 millions d'utilisateurs quotidiens. Alan DeKok maintient seul FreeRADIUS depuis 1999 — la moitié des connexions internet mondiales passent par son code. da.van.ac/un-physicien-nucle…

Un physicien nucléaire gouverne l'authentification de la moitié d'internet

Alan DeKok maintient depuis 27 ans FreeRADIUS, le logiciel open source qui authentifie 100 millions d'utilisateurs quotidiens sur internet, démontrant qu'une infrastructure critique peut rester...

da.van.ac
4
1
436
There is a lot of misleading security advice out there. e.g. many sites copy the same tired myths about PAP vs CHAP. This is wrong: baeldung.com/cs/authenticati… The truth: inkbridgenetworks.com/blog/b… Don't use CHAP. PAP is better. @michal_aibin

Authentication Protocols: PAP vs. CHAP | Baeldung on Computer Science

Explore and compare two authentication protocols developed for Point-to-Point Protocol (PPP): the Password Authentication Protocol (PAP) and the Challenge Handshake Authentication Protocol (CHAP).

baeldung.com
2
4
586
The RADIUS conference went very well. We have agreement from operators and impementers on how to fix long-standing issues with the protocol. radiusconference.org/

RADIUS Conference - Securing the Intranet and Extranet

Attend the RADIUS Conference and explore RADIUS, AAA, eduroam, OpenRoaming, ISP security, and network authentication.

radiusconference.org
2
6
449
Just gave a talk on the history of RADIUS. So many v4 questions. :)
6
345
Klass Weirenga is speaking at the RADIUS conference in March. radiusconference.org/speaker… @eduroam

Klaas Wierenga - RADIUS Conference

Klaas, CIO/CTO at GÉANT, pioneered eduroam and has deep expertise in identity, security, and mobility. An Internet Hall of Fame inductee, he’s a leader in R&E networking.

radiusconference.org
2
276
Meet @AlanDekok, creator of FreeRADIUS and the person who made your network actually work (you're welcome). Join him at RADIUS Conference 2025 for some free, real talk on auth infrastructure: Online: March 13 Register: radiusconference.org #InfoSec #NetworkInfrastructure
1
2
6
377
The RADIUS experts at dinner. @RadiatorAAA , radsecproxy, FreeRADIUS, and the author of the upcoming RADIUS/TLS RFC.
2
8
376
Apparently some vendors are still having issues with BlastRADIUS fixes. Not sure why. Message-Authenticator has been defined for 25+ years. i.e. longer than the IT career of most engineers working on the fixes.
2
1
4
439
There are still some cloud identity providers who claim that PAP is insecure. If you read the BlastRADIUS paper, the cryptographers say otherwise. Who should you believe? Crypto experts, or a random marketing person? You can keep using PAP. It's fine.
1
3
339
There are still some cloud identity providers recommending RADIUS/UDP and MS-CHAP. If you do this, then consider all your passwords to be compromised. Don't use MS-CHAP, or MS-CHAPv2.
1
1
6
460
There is a LOT of misinformation about the BlastRADIUS issue. If you're using RADIUS for administrator authentication to devices: upgrade. Don't switch to TACACS+. Just upgrade your RADIUS server and / or RADIUS client. You will be fine.
3
7
399
There is a LOT of misinformation about the BlastRADIUS issue. If you're using RADIUS for administrator authentication to devices: upgrade. Don't switch to TACACS+. Don't believe anyone who says it's a viable option: they're incompetent.
1
6
366
There is a LOT of misinformation about the BlastRADIUS issue. TACACS+ can't replace RADIUS. TACACS+ is used only for administrator authentication and authorization. It cannot control network access for devices.
4
219
There is a LOT of misinformation about the BlastRADIUS issue. TACACS+ can't replace RADIUS. It has an unauthenticated mode, where all passwords are sent in clear-text across the wire. So it has MUCH worse security.
2
176
There is a LOT of misinformation about the BlastRADIUS issue. TACACS+ can't replace RADIUS. It uses almost the same MD5-based constructs as RADIUS, so it doesn't increase security.
2
155
There is a LOT of misinformation about the BlastRADIUS issue. Diameter isn't an option. Most common uses of Diameter have LESS security than RADIUS. And Diameter is being replaced with HTTPS3 (JSON over QUIC)
3
3
317
There is a LOT of misinformation about the BlastRADIUS issue. Almost all of this is covered in the paper at blastradius.fail What doesn't work? * Changing timeouts * switching to Kerberos, Diameter, TACACS+, IPSec
4
8
487
blastradius.fail RADIUS/UDP considered harmful: RADIUS/UDP vulnerable to MD5 chosen-prefix collision attack #BlastRADIUS Great joint work with @goldbe @miro_haller @nadiaheninger Mike Milano @realDBRGBreaker Adam Suhl!
2
36
3
65
8,408
cve.org/CVERecord?id=CVE-202… Upgrade all of your switches, routers, VPN concentrators, firewalls, access point controllers... inkbridgenetworks.com/blastr…
1
4
294
Oh boy. Upgrade ALL RADIUS clients and servers. World-wide. Full details at inkbridgenetworks.com/blastr…
1
131
Load more