Freeradius is generally used for account authentication management, accounting management, broadband accounts of common telecom operators, Internet account management, accounting, all use radius servers for authentication accounting, next let's take a look at FreeRadius configuration installation in linux.
FreeRadius
FreeRADIUS and OpenLDAP-success
Install related programs
Yum install freeradius2 freeradius2-utils freeradius2-ldap
Enable the LDAP Client of the server. See another file.
Http://www.bKjia. c0m/sys/CentOS/56540.htm
Test the user of the Local Machine and enable steve for testing (remember to add the user back for testing #)
Vi/etc/raddb/user
Steve Cleartext-Password: = "testing"
Service-Type = Framed-User,
Service radiusd restart
Radtest steve testing localhost 0 testing123
Correctly displayed
Rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id = 247, length = 26
In addition, enable a CIDR Block Authentication
Vi/etc/raddb/clients. conf
Client 163.32.x.0/24 {
Secret = testing123
Shortname = schoolAP
}
Edit freeradius's ldap profile bKjia. c0m
Vi/etc/raddb/modules/ldap
Server = "ldap.do.kh.edu.tw"
Identity = "cn = Manager, dc = do, dc = kh, dc = edu, dc = tw"
Password = pswd administrator password do
Basedn = "ou = user, ou = login, dc = do, dc = kh, dc = edu, dc = tw"
Vi/etc/raddb/sites-enabled/default
Authorize {
...
# Files
Ldap
...
}
And
Authenticate {
...
Auth-Type LDAP {
Ldap
}
...
}
Service radiusd restart
Test command
Pre-Enable test
Radiusd-X
Test the local account. Disable it after testing.
Radtest steve testing localhost 0 testing123
Test a CIDR Block
Radtest ldapUser ldapPasswd 163.32.xxx.78 0 testing123