Delinea Server PAM vs. FreeRADIUS

If you have some servers that you need to protect with random passwords, which need to be always changing, then you can use Delinea. It provides a strong and robust way for automating connections with new instances. Also, integration with other tools is pretty easy and straightforward with a lot of documentation.

Incentivized

FreeRADIUS is completely scalable and supports both large and small user databases. Because it doesn't take up a lot of server resources, FreeRADIUS is well-suited for organizations with small budgets (it's in the name!) and limited networking hardware. While there is a port of it for Windows, FreeRADIUS is native to Linux so that would be a limitation for many companies who don't use it.

• Privilege Authentication Control
• Server's hearthbeathing
• Access control
• Credential creating and automation

Incentivized

• FreeRADIUS is easy to configure
• It is fast a lightweight footprint on the server
• FreeRADIUS works universally with other systems that support radius authentication

• Provide SSO with more tools

Incentivized

• FreeRADIUS requires a 3rd party interface to make it easier to access (we use Daloradius) - it would nice if it was built in.
• Installation and configuration are pretty easy and straightforward but does require connecting to a database which can be cumbersome.

I think Delinea has now more features and more grown capacity. Other products tend to stay with the same way of doing things. Delinea has also many features that help decide for it. Support and documentation have never been an issue.

Incentivized

• Secure password bring less hacks
• Correct authentication mechanisms

Incentivized

• We previously used Microsoft Network Policy Server for our RADIUS authentication which works ok but was pretty clunky and requires Windows Server. Switching to FreeRADIUS brought our cost down to zero.
• Because FreeRADIUS works natively in Linux it's easy to setup and works with all distros.
• FreeRADIUS allows us to have user authentication for wifi which is much more secure than a simple shared password solution.