- Realms are defined in the
proxy.conf
file and used to determine if a request has to be forwarded to an external home server. LOCAL
,NULL
, andDEFAULT
are special realms.LOCAL
always exists and is used to cancel proxying.NULL
is used to group usernames without a realm andDEFAULT
is used to group usernames from unknown realms.- For an external home server to receive forwarded requests the server proxying the request has to be defined as a client on the home server.
- Realms defined with the
nostrip
option will cause thesuffix
module not to add theStripped-User-Name
AVP to the request. Thenostrip
option is usually chosen when forwarding requests to an external home server. - When we proxy requests to other RADIUS servers it is important to...
FreeRADIUS Beginner's Guide
FreeRADIUS Beginner's Guide
Overview of this book
The Open Source pioneers have proved during the past few decades that their code and projects can indeed be more solid and popular than commercial alternatives. With data networks always expanding in size and complexity FreeRADIUS is at the forefront of controlling access to and tracking network usage. Although many vendors have tried to produce better products, FreeRADIUS has proved over time why it is the champion RADIUS server. This book will reveal everything you need to know to get started with using FreeRADIUS.
FreeRADIUS has always been a back-room boy. It's not easy to measure the size or number of deployments world-wide but all indications show that it can outnumber any commercial alternatives available. This essential server is part of ISPs, universities, and many corporate networks, helping to control access and measure usage. It is a solid, flexible, and powerful piece of software, but can be a mystery to a newcomer.
FreeRADIUS Beginner's Guide is a friend of newcomers to RADIUS and FreeRADIUS. It covers the most popular Linux distributions of today, CentOS, SUSE, and Ubuntu, and discusses all the important aspects of FreeRADIUS deployment: Installing, configuring and testing; security concerns and limitations; LDAP and Active Directory integration.
It contains plenty of practical exercises that will help you with everything from installation to the more advanced configurations like LDAP and Active Directory integration. It will help you understand authentication, authorization and accounting in FreeRADIUS. It uses many practical step-by-step examples, which are discussed in detail to lead you to a thorough understanding of the FreeRADIUS server as well as the RADIUS protocol. A quiz at the end of each chapter validates your understanding.Not only can FreeRADIUS be used to monitor and limit the network usage of individual users; but large deployments are possible with realms and fail-over functionality. FreeRADIUS can work alone or be part of a chain where the server is a proxy for other institution's users forwarding requests to their servers. FreeRADIUS features one of the most versatile and comprehensive Extensible Authentication Protocol (EAP) implementations. EAP is an essential requirement to implement enterprise WiFi security. FreeRADIUS Beginner's Guide covers all of these aspects.
Table of Contents (16 chapters)
Preface
Free Chapter
1. Introduction to AAA and RADIUS
2. Installation
3. Getting Started with FreeRADIUS
4. Authentication
5. Sources of Usernames and Passwords
6. Accounting
7. Authorization
8. Virtual Servers
9. Modules
10. EAP
11. Dictionaries
12. Roaming and Proxying
13. Troubleshooting
A. Pop Quiz Answers
Index
Customer Reviews