Методические материалы Лохтурова Вячеслава

User Tools

Site Tools

Trace:
сервис_freeradius

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision 		Previous revision
Next revision Both sides next revision
сервис_freeradius [2018/02/08 12:28]
val [Инсталляция сервера] 		сервис_freeradius [2022/03/04 12:14]
val [Debian]
Line 4: Line 4:
 ===== Инсталляция сервера ===== ===== Инсталляция сервера =====
  
-!!! Ставится ​долго ​!!! +!!! Ставится ​2-3 минуты ​!!!
-==== Debian 9 ==== +
-<​code>​ +
-root@server:​~#​ apt install freeradius +
- +
-root@server:​~#​ cd /​etc/​freeradius/​3.0/​ +
-</​code>​ +
 ==== Debian/​Ubuntu ==== ==== Debian/​Ubuntu ====
 <​code>​ <​code>​
 root@server:​~#​ apt install freeradius root@server:​~#​ apt install freeradius
- 
-root@server:​~#​ cd /​etc/​freeradius/​ 
 </​code>​ </​code>​
  
Line 25: Line 16:
 [root@server ~]# yum install freeradius-utils [root@server ~]# yum install freeradius-utils
  
-[root@server ~]# cd /etc/raddb/+[root@server ~]# ls /etc/raddb/
 </​code>​ </​code>​
  
-==== FreeBSD ==== 
-<​code>​ 
-[server:~] # pkg install freeradius 
-</​code><​code>​ 
-[server:~] # cat /​etc/​rc.conf 
-</​code><​code>​ 
-... 
-radiusd_enable=yes 
-</​code><​code>​ 
-[server:~] # cd /​usr/​local/​etc/​raddb/​ 
-</​code>​ 
  
-==== Windows ==== 
  
-  * [[http://​freeradius.net/​]] 
-  * [[http://​val.bmstu.ru/​unix/​billing/​FreeRADIUS.net-1.1.7-r0.0.2.exe]] 
  
 ===== Настройка сервера ===== ===== Настройка сервера =====
Line 50: Line 27:
  
 <​code>​ <​code>​
-server# cat sites-available/default +server# cat /etc/freeradius/​3.0/​clients.conf
-</code><​code>​ +
-authorize { +
-... +
-# unix +
- files +
-accounting { +
-... +
- radutmp +
-... +
-session { +
-... +
- radutmp +
-... +
-</code><​code>​ +
-server# cat clients.conf+
 </​code><​code>​ </​code><​code>​
 ... ...
Line 78: Line 40:
 } }
 </​code><​code>​ </​code><​code>​
-server# ​cat mods-available/radutmp +server# ​:> /etc/freeradius/​3.0/users
-</code><​code>​ +
-... +
-check_with_nas = no +
-... +
-</code><​code>​ +
-server# :> users+
  
-server# cat users+server# cat /​etc/​freeradius/​3.0/​users
 </​code><​code>​ </​code><​code>​
 user1 Cleartext-Password := "​rpassword1"​ user1 Cleartext-Password := "​rpassword1"​
Line 96: Line 52:
 #     ​cisco-avpair = "​shell:​priv-lvl=15"​ #     ​cisco-avpair = "​shell:​priv-lvl=15"​
  
-401 Cleartext-Password := "​401",​ Simultaneous-Use := 2+student Cleartext-Password := "​password"​ 
 + 
 +401 Cleartext-Password := "​401",​ Simultaneous-Use := 1
  
 402 Cleartext-Password := "​402",​ Simultaneous-Use := 1 402 Cleartext-Password := "​402",​ Simultaneous-Use := 1
  
-403 Cleartext-Password := "​403",​ Simultaneous-Use := 1+403 Cleartext-Password := "​403",​ Simultaneous-Use := 2
  
 +</​code><​code>​
 +server# cat /​etc/​freeradius/​3.0/​radiusd.conf
 +</​code><​code>​
 +...
 +log {
 +  ...
 +  auth = yes
 +...
 +</​code><​code>​
 +server# cat /​etc/​freeradius/​3.0/​sites-available/​default
 +</​code><​code>​
 +authorize {
 +...
 +# unix
 + files
 +accounting {
 +...
 + radutmp
 +...
 +session {
 +...
 + radutmp
 +...
 +</​code><​code>​
 +server# cat /​etc/​freeradius/​3.0/​mods-available/​radutmp
 +</​code><​code>​
 +...
 +check_with_nas = no
 +...
 </​code>​ </​code>​
 +
  
 ==== Настройка с использованием mysql ==== ==== Настройка с использованием mysql ====
Line 150: Line 138:
 <​code>​ <​code>​
 root@server:​~#​ service freeradius restart root@server:​~#​ service freeradius restart
-</​code>​ 
- 
-==== FreeBSD ==== 
-<​code>​ 
-[server:~] # service radiusd start 
-</​code>​ 
- 
-==== Windows ==== 
- 
-<​code>​ 
-C:​\FreeRADIUS.net>​start_radiusd_debug.bat 
 </​code>​ </​code>​
  
Line 172: Line 149:
  
 $ radtest user1 rpassword1 127.0.0.1 0 testing123 $ radtest user1 rpassword1 127.0.0.1 0 testing123
 +
 +# tail -f /​var/​log/​freeradius/​radius.log
  
 $ echo "​User-Name=401,​User-Password=401,​NAS-IP-Address=127.0.0.1"​ | radclient localhost auth testing123 $ echo "​User-Name=401,​User-Password=401,​NAS-IP-Address=127.0.0.1"​ | radclient localhost auth testing123
Line 177: Line 156:
 $ echo "​User-Name=401,​Acct-Session-Id=6000006B,​Acct-Status-Type=Start,​NAS-IP-Address=127.0.0.1,​NAS-Port=401402"​| radclient localhost acct testing123 $ echo "​User-Name=401,​Acct-Session-Id=6000006B,​Acct-Status-Type=Start,​NAS-IP-Address=127.0.0.1,​NAS-Port=401402"​| radclient localhost acct testing123
  
-# radwho+# radwho ​-R
  
 $ echo "​User-Name=401,​Acct-Session-Id=6000006B,​Acct-Status-Type=Stop,​NAS-IP-Address=127.0.0.1,​NAS-Port=401402"​| radclient localhost acct testing123 $ echo "​User-Name=401,​Acct-Session-Id=6000006B,​Acct-Status-Type=Stop,​NAS-IP-Address=127.0.0.1,​NAS-Port=401402"​| radclient localhost acct testing123
Line 231: Line 210:
  
 <​code>​ <​code>​
-server# cat eap.conf+freeradius3# cat /​etc/​freeradius/​3.0/​mods-available/​eap
 </​code><​code>​ </​code><​code>​
 ... ...
Line 237: Line 216:
 ... ...
 </​code><​code>​ </​code><​code>​
-server# cat modules/mschap+freeradius3# cat /​etc/​freeradius/​3.0/​mods-available/mschap
 </​code><​code>​ </​code><​code>​
 ... ...
Line 245: Line 224:
 ... ...
        ​require_strong = yes        ​require_strong = yes
 +...
 +</​code><​code>​
 +freeradius3#​ cat /​etc/​freeradius/​3.0/​mods-available/​preprocess
 +</​code><​code>​
 ... ...
        ​with_ntdomain_hack = yes        ​with_ntdomain_hack = yes
сервис_freeradius.txt · Last modified: 2023/06/28 12:00 by val

Page Tools

Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
CC Attribution-Share Alike 4.0 International Donate Powered by PHP Valid HTML5 Valid CSS Run on Debian Driven by DokuWiki