The project was created to implement a user authentication service using Radius and ActiveDirectory. Authentication is used over EAP-TTLS MSCHAPv2. Works with wildcard DV certificate.
Uses the following micro service applications:
- Server Freeradius (samba + freeradius + winbind).
/opt/
📦freeradius
┣ 📂.docker
┃ ┣ 📜Dockerfile - Docker file freeradius.
┃ ┣ 📜configure - freeradius configuration bash script.
┃ ┗ 📜init - freeradius installation init bash script.
┣ 📂crt - directory with certificates.
┣ 📜.env_temp - variable template file.
┣ 📜.gitignore
┣ 📜README.md
┗ 📜docker-compose.yaml - Docker-compose project.
Before deploying the project, install Docker, Docker Compose latest versions.
For installation: To install, run:
-
Do a git clone.
-
Create directory ./crt and import dv certificate
-
Create an .env file and fill with variables:
cp ./.env_temp ./.env
- Run the project
docker-compose up -d
- After a couple of minutes, the service will start.
Important!!!
The project uses a wildcard DV certificate.
/etc/freeradius/3.0/certs/server.crt - assembled from server certificate + CA certificate (root cert) + intermediate certificate (intermediate).