Hi everyone! I've been reading this forum for a while, but this is my first post. I'm trying to set up RADIUS for our staff WiFi to avoid password sharing among employees. The challenge is that I want to use our Google Workspace credentials, but our free nonprofit version doesn't support LDAP, and my request to upgrade was turned down. Do you have any suggestions on how I can implement RADIUS without using LDAP? Thanks for your help!
3 Answers
From what I've seen, there isn't a straightforward way to bridge Google Workspaces to an on-site RADIUS without payment. However, if you want something running in-house, consider setting up a 389 directory server with Freeradius for a barebones installation. You might even run it off a Raspberry Pi! If you need certificates, FreeIPA could be worth looking into, but be ready for a bit of a learning curve!
You're probably looking for EAP-TLS for secure authentication. If you want to keep things free, check out NPS and Active Directory Certificate Services if you’re in a Windows environment. Otherwise, Freeradius is a great option, but you might need a specific solution for certs if you're using Chromebooks.
Unfortunately, there aren’t many free options that can integrate cloud-native or SAML with RADIUS. If you're serious about enterprise-level wireless security, you might have to invest in a solution or a paid service that connects SAML with RADIUS.
We use Ubiquiti equipment and primarily Apple devices, so I'm curious if that's a fit with Freeradius.