Your suggested change has been received. Thank you.

close
Thales Logo

All

  • All
  • CipherTrust Manager
  • CipherTrust Application Data Protection (CADP)
  • CipherTrust Application Key Management (CAKM)
  • CipherTrust Batch Data Transformation (BDT)
  • CipherTrust Cloud Key Management (CCKM)
  • CipherTrust Data Discovery and Classification (DDC)
  • CipherTrust Data Protection Gateway (DPG)
  • CipherTrust Database Protection (CDP)
  • CipherTrust Intelligent Protection (CIP)
  • CipherTrust Integrations
  • CipherTrust Migrations
  • CipherTrust RESTful Data Protection (CRDP)
  • CipherTrust Transparent Encryption (CTE)
  • CipherTrust Transparent Encryption Userspace (CTE-U)
  • CipherTrust Secrets Management (CSM)
  • CipherTrust Vaulted Tokenization (CT-V)
  • CipherTrust Vaultless Tokenization (CT-VL)
  • CTE-Linux
  • CTE-Windows
  • CTE-AIX
  • CTE-K8s
  • CTE-U
  • Crypto Command Center
  • Data Protection on Demand
  • Luna Cloud HSM
  • Luna Network HSM
  • Luna PCIe HSM
  • Luna USB HSM
  • OneWelcome Identity Platform
  • ProtectApp LUKS
  • ProtectServer 2 HSM
  • ProtectServer 3 HSM
  • SafeNet Trusted Access (STA)
  • SafeNet MobilePASS+
  • SafeNet MobilePASS+ for Android
  • SafeNet MobilePASS+ for Chrome
  • SafeNet MobilePASS+ for macOS
  • SafeNet MobilePASS+ for iOS
  • SafeNet MobilePASS+ for WatchOS
  • SafeNet MobilePASS+ for Windows
  • SafeNet Synchronization Agent
  • SafeNet Logging Agent
  • SafeNet Agent for FreeRADIUS
  • SafeNet Agent for NPS
  • SafeNet Agent for Windows Logon
  • SafeNet Authentication Service Private Cloud Edition (SAS PCE)
  • SafeNet Remote Logging Agent
  • SafeNet Keycloak Agent
  • SafeNet IDPrime Virtual (IDPV)
  • SafeNet FIDO Key Manager
  • SafeNet FIDO Key Manager for Android
  • SafeNet FIDO Key Manager for iOS
  • SafeNet FIDO Key Manager for Windows
back

SafeNet Agents

SafeNet Agent for FreeRADIUS

search
printsuggest an edit

SafeNet Agent for FreeRADIUS

The SafeNet Agent for FreeRADIUS is a highly secure, enterprise authentication agent that enables RADIUS clients to communicate with SafeNet Authentication Service (SAS) and SafeNet Trusted Access (STA) using SSL/TLS.

This document explains in detail how to install and configure FreeRADIUS agent to authenticate against SAS or STA.

The agent uses an encrypted key file to communicate with the SafeNet server. This ensures that all authentication attempts made against the server are from valid recognized agents. To accomplish this, a key file is generated at the SafeNet server and provided or loaded at the agent.

copy link to clipboardAuthentication flow

The following steps broadly depict the flow of actions for the agent solution:

  1. The client sends an authentication request to the FreeRADIUS agent.

  2. The FreeRADIUS agent sends a web-service request to the SafeNet server.

  3. If authentication is successful, SafeNet server returns an affirmative response to the FreeRADIUS agent.

  4. The FreeRADIUS agent sends acceptance of the authentication request to the client.

    FreeRADIUS agent flow

copy link to clipboardCompatibility

The information in this document applies to:

copy link to clipboardSafeNet Servers

  • SafeNet Authentication Service PCE/SPE 3.13 and later (SAS)

  • SafeNet Trusted Access (STA)

copy link to clipboardSupported Platforms

copy link to clipboardDocker

  • Red Hat Enterprise Linux 8.3

  • Red Hat Enterprise Linux 9.3

  • CentOS 9

  • Ubuntu 22.04

copy link to clipboardDocker

  • Red Hat Enterprise Linux 8.3

  • Red Hat Enterprise Linux 9.4

copy link to clipboardSupported RADIUS Protocols

  • PAP

  • MSCHAP-v2

  • PEAP

copy link to clipboardSupported LDAP Server for on-prem password validation

  • Microsoft Active Directory

copy link to clipboardPrerequisites

  • Before executing the agent’s deployment script, ensure that Podman and Docker are installed for Podman and Docker deployments respectively.

  • Optional: PEAP adds a TLS layer on the top of EAP and uses TLS to authenticate the server to the client. Web server certificate is required to use PEAP.

caution

Caution

All commands and file names in Linux are case sensitive; therefore the exact case must be entered.

All commands executed on a Linux system require granted permissions to run specific commands.

On this page