#Setting Up Radius Outpost

1 messages · Page 1 of 1 (latest)

modest drum
#

It seems support for Radius is fairly lightly documented and I'm stumbling around trying to get it setup. I've created a provider and application without issue but now that I'm trying to add an outpost I'm getting stuck, I've done everything the same as the LDAP outpost that I created but nothing seems to be working and the Outpost never becomes active. Can anyone provide any further specific instructions that need to be followed?

cedar flare
#

the setup of the actual outpost is pretty much the same as the LDAP one, I'm assuming with "never becomes active" you mean that no container gets created? Did you select an integration in the outpost settings?

shy wasp
#

it did not create the docker container automatically for me either.
I do use docker compose (portainer stack) and just copied the definition for ldap like so:

radius:
    image: ghcr.io/goauthentik/radius:${AUTHENTIK_TAG}
    container_name: authentik-radius
    hostname: radius101
    networks:
      pub:
        ipv4_address: 10.10.10.44
    ports:
      - 1812:1812/udp
      - 1813:1813/udp
    environment:
      AUTHENTIK_HOST: https://sso.domain.com
      AUTHENTIK_INSECURE: "false"
      AUTHENTIK_TOKEN: Oxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
            # Starting with 2021.9, you can optionally set this too
            # when authentik_host for internal communication doesn't match the public URL
            # AUTHENTIK_HOST_BROWSER: https://external-domain.tld
#

some part like ip is specific to my environment.
This gets the outpost up and responsive.

getting radius to work is another topic.
Auth is not successfully possible for me at this point

shy wasp
#

It seems for me the FLOW is not working.
For testing purposes added the radius ip+port in our pfsense box as an auth backend.
When I do a auth test I get this error in the radius outpost:

2023-05-23T14:55:46.716536000Z DBG undefined | cidr=0.0.0.0/0 event=Matched CIDR ip=10.1.15.1 logger=authentik.outpost.radius timestamp=2023-05-23T14:55:46Z 
2023-05-23T14:55:46.716971000Z INF undefined | code=Access-Request event=Radius Request logger=authentik.outpost.radius request=4519e665-6489-4db4-b594-597adaa47da7 timestamp=2023-05-23T14:55:46Z 
2023-05-23T14:55:46.792414000Z DBG undefined | client=10.1.15.1 component=ak-stage-access-denied event=Got challenge flow=radius-auth logrus_error=can not add field "requestId" timestamp=2023-05-23T14:55:46Z type=native username=testeduser