We have a Mac Mini Server (macOS 10.12) with Server App (5.2) configured (Open Directory and DNS Server Services active, the network is on static IP). We used to have one Airport Extreme configured from the Server App, with Server providing RADIUS authentication.
Now we would like to add other Airport Extreme basestations to the network in order to extend its range. We were already able to add another RADIUS client via Admin Tool Radius.
I would like to know what kind of RADIUS support does Server App provide?
Since adding a second Airport basestation does not work, I guess I will have to configure a RADIUS server outside of Server App, probably following this video: https://vimeo.com/53774350?
What happens to the Server App's Airport Basestation configuration I had active for the first Basestation? Can I still configure Services and mapping from Server App?
Should I just keep the Basestation activated in Server App, but deactivate the authentication requirement over WiFi and configure a separate RADIUS server?
How about certificates: Server App already has a global certificate, can i use this instead of building a new one?
Will the access group (which is mentioned in the video) be visible in Server App?
Hopefully someone can help.
When I "sudo radiusconfig -getconfig" I get:
{
clientcount = 2;
configured = 1;
"eap.conf" = {
"CA_file" = "/etc/certificates/server.yyyy.zz.xxxxxxxxxx.chain.pem";
cadir = "/Library/Server/radius/raddb/certs";
certdir = "/Library/Server/radius/raddb/certs";
"certificate_file" = "/etc/certificates/server.yyyy.zz.xxxxxxxxxx.cert.pem";
"check_cert_cn" = "%{User-Name}";
"check_crl" = no;
"dh_file" = "/Library/Server/radius/raddb/certs/dh";
"fragment_size" = 1024;
"include_length" = yes;
"private_key_file" = "/etc/certificates/server.yyyy.zz.xxxxxxxxxx.key.pem";
"private_key_password" = "Apple:UseCertAdmin";
"random_file" = "/Library/Server/radius/raddb/certs/random";
};
"radiusd.conf" = {
auth = no;
"auth_badpass" = no;
"auth_goodpass" = no;
"cleanup_delay" = 5;
confdir = "/Library/Server/radius/raddb";
"exec_prefix" = "/Applications/Server.app/Contents/ServerRoot/usr";
"hostname_lookups" = no;
localstatedir = "/private/var";
logdir = "/private/var/log/radius";
"max_request_time" = 30;
"max_requests" = 1024;
prefix = "/Applications/Server.app/Contents/ServerRoot/usr";
radacctdir = "/private/var/log/radius/radacct";
raddbdir = "/Library/Server/radius/raddb";
sbindir = "/Applications/Server.app/Contents/ServerRoot/usr/sbin";
sysconfdir = "/Library/Server/radius";
};
}
When I "sudo radiusconfig -naslist" I get
sudo radiusconfig -naslist
client IP.xxx.xxx.xxx {
secret = YYYYYYYYYY
shortname = "Base Station 1"
community =
type = "AirPort Base Station"
description =
};
client IP.xxx.xxx.xxx {
secret = ZZZZZZZZZZ
shortname = "Base Station 2"
community =
type = "Airport Base Station"
description =
};