MFA with Google Authenticator

[Vladimir]

This may come in handy for small scale implementations where RSA SecurID is too expensive of an option to consider.

[PointOfChecking]

Hey,

Following the PDF guide, but not able to do the radtest.

I'm getting the error:

(0) No reply from server for ID 128 socket 3

I notice I am receiving a strange IP for NAS-IP :

NAS-IP-Address = 127.0.1.1

EDIT: this was because the service was not running 🤣

BTW, I was unable to find the /etc/network/interfaces file, so wasn't able to do the first part (not sure if related):

"Configuring Network Settings for Ubuntu Server"

EDIT: I configured the network config using /etc/netplan and the GUI

I'm running below version:
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 24.04.1 LTS
Release: 24.04
Codename: noble

Thanks.

[Vladimir]

As was mentioned earlier in this thread, later versions of Ubuntu and FreeRadius require different installation and configuration steps. I will post the updated document or the link to one using 24.04.1 LTS and 3.2.6. FreeRadius.

[kamilazat]

It definitely requires different settings on the freeradius part, but with a little meddling I managed to set it up couple of weeks ago. Kudos to you @Vladimir !

[Vladimir]

That's great! If you'll find time, please let me know the sequence of installation and configuration changes you have used to make it work. It will help me to produce the updated document. As of now, it looks like the PAM module was removed from FreeRADIUS 3.X.X and in order to install it you have to build it from source code. Doing that works, but the FreeRADIUS is not installed as a service. I was planning to reach out to developers to get their take on this issue. If you have found a workaround, I'll be keen to hear about it.

Cheers,

Vladimir