CentOS安裝配置PPTP並結合freeradius驗證

本帖的配置環境為CentOS5 32bit，配置安裝PPTP的過程就不寫了，如果不會請在本部落格自行搜尋，下面貼出整合freeradius需要進行的配置：

pptp用戶端配置部分

代碼如下	複製代碼
wget http://apt.sw.be/redhat/el5/en/i386/rpmforge/RPMS/radiusclient-0.3.2-0.2.el5.rf.i386.rpm rpm -i radiusclient-0.3.2-0.2.el5.rf.i386.rpm

vim /etc/radiusclient/servers

代碼如下	複製代碼
#Server Name or Client/Server pair  Key   #----------------    --------------- #portmaster.elemental.net   hardlyasecret #portmaster2.elemental.net       donttellanyone YOUR_RADIUS_SERVER_HOSTNAME_OR_IP  YOUR_RADIUS_SERVER_SECRET

vim /etc/radiusclient/radiusclient.conf

代碼如下

複製代碼

auth_order radius,local login_tries 4 login_timeout 60 nologin /etc/nologin issue /etc/radiusclient/issue www.111cn.net authserver  RADIUS_SERVER_IP_OR_HOSTNAME:1812 acctserver  RADIUS_SERVER_IP_OR_HOSTNAME:1813 servers  /etc/radiusclient/servers dictionary  /etc/radiusclient/dictionary login_radius /usr/sbin/login.radius seqfile  /var/run/radius.seq mapfile  /etc/radiusclient/port-id-map default_realm radius_timeout 10 radius_retries 3 login_local /bin/login cd /etc/radiusclient/ wget http://safesrv.net/public/dictionary.microsoft.zip unzip dictionary.microsoft.zip

vim /etc/radiusclient/dictionary

加入下面的欄位：

代碼如下	複製代碼
INCLUDE /etc/radiusclient/dictionary.microsoft INCLUDE /etc/radiusclient/dictionary.ascend INCLUDE /etc/radiusclient/dictionary.compat INCLUDE /etc/radiusclient/dictionary.merit

vim /etc/ppp/options.pptpd

加入：

代碼如下	複製代碼
plugin radius.so plugin radattr.so  service pptpd restart chkconfig pptpd on

freeradius添加認證用戶端

vim /etc/raddb/clients.conf

代碼如下	複製代碼
client VPN Server IP HERE {     secret      = YOUR SECRET HERE     shortname   = yourVPN     nastype     = other }