Difference between revisions of "RADIUS Users"

Line 20: Line 20:
 
|-
 
|-
 
| Password<br>Confirm Password|| Yes || Input the password of a username.
 
| Password<br>Confirm Password|| Yes || Input the password of a username.
 +
|-
 +
| Expiration || No || Set the user authentication expiration date.
 
|-
 
|-
 
| User Information || Optional || You can fill out the general user information. You can change the title of the form from the "Environment > [[Environment  | Custom Fields]]".
 
| User Information || Optional || You can fill out the general user information. You can change the title of the form from the "Environment > [[Environment  | Custom Fields]]".
Line 33: Line 35:
 
|-
 
|-
 
| MAC Address || Yes || The [[MAC Address]] of a user machine. The address is case-sensitive and also may include delimiters and you can find the format of the MAC address from the [[Accounting]].
 
| MAC Address || Yes || The [[MAC Address]] of a user machine. The address is case-sensitive and also may include delimiters and you can find the format of the MAC address from the [[Accounting]].
 +
|-
 +
| Expiration || No || Set the user authentication expiration date.
 
|-
 
|-
 
| colspan=3 | Others are same as the Username Authentication.
 
| colspan=3 | Others are same as the Username Authentication.
Line 59: Line 63:
  
 
{{note|Passwords for users authenticated based on MAC address or stored in an external database as "[[RADIUS Settings - General | cached user]]" cannot be reset.}}
 
{{note|Passwords for users authenticated based on MAC address or stored in an external database as "[[RADIUS Settings - General | cached user]]" cannot be reset.}}
 +
 +
==== Expiration ====
 +
Users with a specified expiration time that has passed will not be granted authentication (Access-Reject), and this information will not be automatically deleted."

Revision as of 15:55, 24 October 2023

RADIUS > Users

You can add, update, or delete the usernames for the RADIUS authentication.

Create New User

You can add a new user at the top right of the page and can create a user as either a Username authentication or a MAC Address authentication. The Username authentication stores a User-Name and User-Password and the credentials are validated with the two attributes to authenticate an ACCESS-REQUEST.
The MAC address authentication store a MAC address of a user machine and the credentials are validated with the address. The MAC address type is applied usually in the environment of an open wireless network.

Username Authentication
Item Required Description
Username Yes The multibyte characters(e.g, korean, japaneses) are not allowed.
Status Yes Select "authorized"
Password Type Yes It is the encryption method of a password. If a user machine is windows 10, the type must be either the Windows NT hashed passwords or clear-text passwords.
Password
Confirm Password
Yes Input the password of a username.
Expiration No Set the user authentication expiration date.
User Information Optional You can fill out the general user information. You can change the title of the form from the "Environment > Custom Fields".
Group No The group to which the user.
MAC Address Authentication
Item Required Description
MAC Address Yes The MAC Address of a user machine. The address is case-sensitive and also may include delimiters and you can find the format of the MAC address from the Accounting.
Expiration No Set the user authentication expiration date.
Others are same as the Username Authentication.


User Authorization, Updating, and Deleting

A username that was registered from the captive portal page will be added as an un-authorized one. You can authorize it by click the 23x icon in front of each row. Within the same interface, you can also change other information and delete a user.


Additional Attributes

Authentication Attributes

Authentication attributes are pieces of information used in RADIUS authentication in addition to the basic information (User-Name, User-Password). For useful authentication attributes, refer to the Attributes section.

Reply Attributes

Reply attributes refer to the attributes provided to the user after RADIUS authentication. For useful reply attributes, refer to the Attributes section.

Password Reset

You can reset the password of registered users.

When a user's password is reset, the previous password becomes unusable, and a temporary password is issued. The use of such temporary passwords and the password reset feature can be configured in RADIUS > Settings > General > Password Complexity Requirements for RADIUS User-Password. If the password reset feature is inactive (default state), users cannot use the password reset function.

When a password is reset, the user must create a new password using the temporary password on the password change page. For more details, refer to RADIUS > Settings > General > Password Complexity Requirements for RADIUS User-Password.

Passwords for users authenticated based on MAC address or stored in an external database as " cached user" cannot be reset.

Expiration

Users with a specified expiration time that has passed will not be granted authentication (Access-Reject), and this information will not be automatically deleted."