This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
сервис_freeradius [2017/12/13 07:53] val [Тестирование сервера] |
сервис_freeradius [2022/03/04 12:14] val [Debian] |
||
---|---|---|---|
Line 4: | Line 4: | ||
===== Инсталляция сервера ===== | ===== Инсталляция сервера ===== | ||
- | ==== Debian 9 ==== | + | !!! Ставится 2-3 минуты !!! |
- | <code> | + | |
- | root@server:~# apt install freeradius | + | |
- | + | ||
- | root@server:~# cd /etc/freeradius/3.0/ | + | |
- | </code> | + | |
==== Debian/Ubuntu ==== | ==== Debian/Ubuntu ==== | ||
<code> | <code> | ||
root@server:~# apt install freeradius | root@server:~# apt install freeradius | ||
- | |||
- | root@server:~# cd /etc/freeradius/ | ||
</code> | </code> | ||
Line 24: | Line 16: | ||
[root@server ~]# yum install freeradius-utils | [root@server ~]# yum install freeradius-utils | ||
- | [root@server ~]# cd /etc/raddb/ | + | [root@server ~]# ls /etc/raddb/ |
</code> | </code> | ||
- | ==== FreeBSD ==== | ||
- | <code> | ||
- | [server:~] # pkg install freeradius | ||
- | </code><code> | ||
- | [server:~] # cat /etc/rc.conf | ||
- | </code><code> | ||
- | ... | ||
- | radiusd_enable=yes | ||
- | </code><code> | ||
- | [server:~] # cd /usr/local/etc/raddb/ | ||
- | </code> | ||
- | ==== Windows ==== | ||
- | * [[http://freeradius.net/]] | ||
- | * [[http://val.bmstu.ru/unix/billing/FreeRADIUS.net-1.1.7-r0.0.2.exe]] | ||
===== Настройка сервера ===== | ===== Настройка сервера ===== | ||
Line 49: | Line 27: | ||
<code> | <code> | ||
- | server# cat sites-available/default | + | server# cat /etc/freeradius/3.0/clients.conf |
- | </code><code> | + | |
- | authorize { | + | |
- | ... | + | |
- | # unix | + | |
- | files | + | |
- | accounting { | + | |
- | ... | + | |
- | radutmp | + | |
- | ... | + | |
- | session { | + | |
- | ... | + | |
- | radutmp | + | |
- | ... | + | |
- | </code><code> | + | |
- | server# cat clients.conf | + | |
</code><code> | </code><code> | ||
... | ... | ||
Line 77: | Line 40: | ||
} | } | ||
</code><code> | </code><code> | ||
- | server# cat mods-available/radutmp | + | server# :> /etc/freeradius/3.0/users |
- | </code><code> | + | |
- | ... | + | |
- | check_with_nas = no | + | |
- | ... | + | |
- | </code><code> | + | |
- | server# :> users | + | |
- | server# cat users | + | server# cat /etc/freeradius/3.0/users |
</code><code> | </code><code> | ||
user1 Cleartext-Password := "rpassword1" | user1 Cleartext-Password := "rpassword1" | ||
Line 95: | Line 52: | ||
# cisco-avpair = "shell:priv-lvl=15" | # cisco-avpair = "shell:priv-lvl=15" | ||
- | 401 Cleartext-Password := "401", Simultaneous-Use := 2 | + | student Cleartext-Password := "password" |
+ | |||
+ | 401 Cleartext-Password := "401", Simultaneous-Use := 1 | ||
402 Cleartext-Password := "402", Simultaneous-Use := 1 | 402 Cleartext-Password := "402", Simultaneous-Use := 1 | ||
- | 403 Cleartext-Password := "403", Simultaneous-Use := 1 | + | 403 Cleartext-Password := "403", Simultaneous-Use := 2 |
+ | </code><code> | ||
+ | server# cat /etc/freeradius/3.0/radiusd.conf | ||
+ | </code><code> | ||
+ | ... | ||
+ | log { | ||
+ | ... | ||
+ | auth = yes | ||
+ | ... | ||
+ | </code><code> | ||
+ | server# cat /etc/freeradius/3.0/sites-available/default | ||
+ | </code><code> | ||
+ | authorize { | ||
+ | ... | ||
+ | # unix | ||
+ | files | ||
+ | accounting { | ||
+ | ... | ||
+ | radutmp | ||
+ | ... | ||
+ | session { | ||
+ | ... | ||
+ | radutmp | ||
+ | ... | ||
+ | </code><code> | ||
+ | server# cat /etc/freeradius/3.0/mods-available/radutmp | ||
+ | </code><code> | ||
+ | ... | ||
+ | check_with_nas = no | ||
+ | ... | ||
</code> | </code> | ||
+ | |||
==== Настройка с использованием mysql ==== | ==== Настройка с использованием mysql ==== | ||
Line 145: | Line 134: | ||
</code> | </code> | ||
===== Запуск сервера ===== | ===== Запуск сервера ===== | ||
- | |||
- | ==== FreeBSD ==== | ||
- | <code> | ||
- | [server:~] # service radiusd start | ||
- | </code> | ||
==== Debian/Ubuntu ==== | ==== Debian/Ubuntu ==== | ||
<code> | <code> | ||
root@server:~# service freeradius restart | root@server:~# service freeradius restart | ||
- | </code> | ||
- | |||
- | ==== Windows ==== | ||
- | |||
- | <code> | ||
- | C:\FreeRADIUS.net>start_radiusd_debug.bat | ||
</code> | </code> | ||
Line 171: | Line 149: | ||
$ radtest user1 rpassword1 127.0.0.1 0 testing123 | $ radtest user1 rpassword1 127.0.0.1 0 testing123 | ||
+ | |||
+ | # tail -f /var/log/freeradius/radius.log | ||
$ echo "User-Name=401,User-Password=401,NAS-IP-Address=127.0.0.1" | radclient localhost auth testing123 | $ echo "User-Name=401,User-Password=401,NAS-IP-Address=127.0.0.1" | radclient localhost auth testing123 | ||
Line 176: | Line 156: | ||
$ echo "User-Name=401,Acct-Session-Id=6000006B,Acct-Status-Type=Start,NAS-IP-Address=127.0.0.1,NAS-Port=401402"| radclient localhost acct testing123 | $ echo "User-Name=401,Acct-Session-Id=6000006B,Acct-Status-Type=Start,NAS-IP-Address=127.0.0.1,NAS-Port=401402"| radclient localhost acct testing123 | ||
- | # radwho | + | # radwho -R |
$ echo "User-Name=401,Acct-Session-Id=6000006B,Acct-Status-Type=Stop,NAS-IP-Address=127.0.0.1,NAS-Port=401402"| radclient localhost acct testing123 | $ echo "User-Name=401,Acct-Session-Id=6000006B,Acct-Status-Type=Stop,NAS-IP-Address=127.0.0.1,NAS-Port=401402"| radclient localhost acct testing123 | ||
Line 230: | Line 210: | ||
<code> | <code> | ||
- | server# cat eap.conf | + | freeradius3# cat /etc/freeradius/3.0/mods-available/eap |
</code><code> | </code><code> | ||
... | ... | ||
Line 236: | Line 216: | ||
... | ... | ||
</code><code> | </code><code> | ||
- | server# cat modules/mschap | + | freeradius3# cat /etc/freeradius/3.0/mods-available/mschap |
</code><code> | </code><code> | ||
... | ... | ||
Line 244: | Line 224: | ||
... | ... | ||
require_strong = yes | require_strong = yes | ||
+ | ... | ||
+ | </code><code> | ||
+ | freeradius3# cat /etc/freeradius/3.0/mods-available/preprocess | ||
+ | </code><code> | ||
... | ... | ||
with_ntdomain_hack = yes | with_ntdomain_hack = yes |