RADEAPCLIENT(1)

✨ RADEAPCLIENT(1) ✨

okay bestie, so this one lives in the FreeRADIUS Daemon manual section and it's literally the EAP girlie of the radius client family 💖 buckle up, we're sending packets.

🌸 NAME 🌸

radeapclient — send EAP packets to a RADIUS server, calculate responses 🦋

🎀 SYNOPSIS 🎀

radeapclient [-4] [-6] [-c count] [-d raddb_directory] [-f file] [-h]
[-i source_ip] [-q] [-s] [-r retries] [-S file] [-t timeout] [-v] [-x]
server {acct|auth} secret

💅 DESCRIPTION 💅

So radeapclient is a radius client program, periodt. It can send arbitrary radius packets to a radius server, and then it shows you the reply. Iconic behaviour, honestly.

Where it differs from radclient is the whole point: if there's an EAP-MD5 challenge, it will be responded to. That's the vibe. That's the moment. 👑

Other than that? radeapclient is otherwise identical to radclient. fr fr.

Now the deets on attributes, bestie:

• The EAP-Identity attribute, if present, is used to construct an EAP Identity message.
• The EAP-MD5-Password attribute, if present, is used to respond to an MD5 challenge.
• No other EAP types are currently supported. 💀 like, that's the limit, sorry not sorry.

✨ OPTIONS ✨

• -4 — Use IPv4 (this is the default, so it's giving lowkey unnecessary but valid 🫶)
• -6 — Use IPv6 🌈
• -c count — Send each packet count times.
• -d raddb — Set dictionary directory.
• -f file — Read packets from file, not stdin.
• -r retries — If it times out, retry sending the packet retries times. 🔁
• -t timeout — Wait timeout seconds before retrying (may be a floating point number, so like, 1.5 is fine bestie 🍓).
• -h — Print usage help information.
• -i id — Set request id to id. Values may be 0..255.
• -S file — Read secret from file, not command line. 👀 (keeping secrets off the command line is main character energy)
• -q — Quiet, do not print anything out. 🤫
• -s — Print out summary information of auth results.
• -v — Show program version information.
• -x — Enable debugging mode. 🔥

🌟 EXAMPLE 🌟

A sample session that queries the remote server with an EAP-MD5 challenge. Look at this little script, it ate:

( echo 'User-Name = "bob"';
  echo 'EAP-MD5-Password = "hello"';
  echo 'NAS-IP-Address = marajade.sandelman.ottawa.on.c';
  echo 'EAP-Code = Response';
  echo 'EAP-Id = 210';
  echo 'EAP-Type-Identity = "bob";
  echo 'Message-Authenticator = 0x00';
  echo 'NAS-Port = 0' ) >req.txt

radeapclient -x localhost auth testing123 <req.txt

no cap, copy that exactly — including the little quirks, bestie, don't go "fixing" anything 🙈

🦋 SEE ALSO 🦋

radclient(1)

👑 AUTHOR 👑

Michael Richardson, <mcr@sandelman.ottawa.on.ca> 💜

and that's the whole page, bestie — this one's from the <strong>FreeRADIUS Daemon</strong> manual, dated <strong>08 September 2003</strong>. iconic vintage behaviour, mwah 💅✨