OPNsense Forum

English Forums => General Discussion => Topic started by: kalteVollmilch on November 07, 2017, 11:51:15 am

Title: WebGUI: Authorization via Radius
Post by: kalteVollmilch on November 07, 2017, 11:51:15 am
Hello everyone,

I want to import users from Radius into the local database so I can allow them to access the webGUI.
According to https://wiki.opnsense.org/manual/users.html, this can be done.
So far, I've been able to import users from LDAP, which is nice but not really  what I want :(.

Is there any way to do this or is it just not posssible?

Thanks for any help in advance :)
Title: Re: Authorization via Radius
Post by: mimugmail on November 07, 2017, 12:19:43 pm
What do you mean with "import"? Do you want to authenticate via external Radius? Then add this under

System - Access - Servers

And switch Authentication Server in

System - Access - Settings
Title: Re: Authorization via Radius
Post by: kalteVollmilch on November 07, 2017, 01:03:35 pm
by "importing" them I mean adding a user from an external server (in this case Radius) to the local Database, so I can grant rights to those users via groups, but the authentication itself is still done via the external server.
The link from my first post probably describes it better than I do (https://wiki.opnsense.org/manual/users.html#authorization).

I've already done the steps you described, which allows me to sign in to the webGUI, however, as I can't assign any groups, I just get the "No page assigned to this user! Click here to logout" error.

So my question is, how I can import users from Radius and assign groups to them
Title: Re: Authorization via Radius
Post by: mimugmail on November 07, 2017, 01:19:37 pm
Hm, never tried.
Try creating a new user locally with the same name (but different pw), give proper rights and then test again with radius backend authentication.
Title: Re: Authorization via Radius
Post by: kalteVollmilch on November 07, 2017, 01:53:46 pm
Quote
Try creating a new user locally with the same name (but different pw), give proper rights and then test again with radius backend authentication.
Already tried this, hasn't worked for me. Probably because there a '@' in the username, which OPNsense doesn't like.