This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
аутентификация_с_использованием_radius_сервера [2009/04/13 15:45] val |
— (current) | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | ====== Аутентификация с использованием RADIUS сервера ====== | ||
- | |||
- | ===== Инсталяция сервера ===== | ||
- | |||
- | ==== FreeBSD ==== | ||
- | <code> | ||
- | [gX:~] # pkg_add -r freeradius | ||
- | |||
- | [g14:~] # cat /etc/rc.conf | ||
- | ... | ||
- | radiusd_enable=yes | ||
- | ... | ||
- | |||
- | [gX:~] # cd /usr/local/etc/raddb/ | ||
- | </code> | ||
- | |||
- | ==== Ubuntu ==== | ||
- | <code> | ||
- | root@gX:~# apt-get install freeradius | ||
- | |||
- | root@gX:~# cd /etc/freeradius/ | ||
- | </code> | ||
- | |||
- | ===== Настройка сервера ===== | ||
- | <code> | ||
- | gX# cat users | ||
- | uX Cleartext-Password := "radius" | ||
- | |||
- | gX# cat clients.conf | ||
- | ... | ||
- | client cX { | ||
- | secret = testing123 | ||
- | shortname = cX | ||
- | } | ||
- | ... | ||
- | |||
- | </code> | ||
- | **Для Freeradius2.x (FreeBSD) необходимо:** | ||
- | <code> | ||
- | gX# rcsdiff sites-available/default | ||
- | 141c141 | ||
- | < unix | ||
- | --- | ||
- | > # unix | ||
- | </code> | ||
- | |||
- | ===== Запуск сервиса ===== | ||
- | |||
- | ==== FreeBSD ==== | ||
- | <code> | ||
- | [gX:~] # /usr/local/etc/rc.d/radiusd start | ||
- | </code> | ||
- | |||
- | ==== Ubuntu ==== | ||
- | <code> | ||
- | root@gX:~# /etc/init.d/freeradius restart | ||
- | </code> | ||
- | |||
- | ===== Использование pam radius для сервиса login ===== | ||
- | |||
- | ==== FreeBSD ==== | ||
- | <code> | ||
- | [cX:~] # cat /etc/radius.conf | ||
- | auth gX testing123 3 | ||
- | |||
- | [cX:~] # cat /etc/pam.d/login | ||
- | ... | ||
- | auth sufficient pam_radius.so no_warn try_first_pass | ||
- | auth include system | ||
- | ... | ||
- | </code> | ||
- | |||
- | ==== Ubuntu ==== | ||
- | <code> | ||
- | root@cX:~# apt-get install libpam-radius-auth | ||
- | |||
- | root@cX:~# cat /etc/pam_radius_auth.conf | ||
- | ... | ||
- | gX testing123 3 | ||
- | ... | ||
- | |||
- | root@cX:~# cat /etc/pam.d/login | ||
- | ... | ||
- | auth sufficient pam_radius_auth.so | ||
- | @include common-auth | ||
- | ... | ||
- | </code> | ||