This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
аутентификация_с_использованием_radius_сервера [2010/09/13 12:28] val |
— (current) | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | ====== Аутентификация с использованием RADIUS сервера ====== | ||
- | ===== Инсталяция сервера ===== | ||
- | |||
- | ==== FreeBSD ==== | ||
- | <code> | ||
- | [server:~] # pkg_add -r freeradius | ||
- | |||
- | [server:~] # cat /etc/rc.conf | ||
- | ... | ||
- | radiusd_enable=yes | ||
- | ... | ||
- | |||
- | [server:~] # cd /usr/local/etc/raddb/ | ||
- | </code> | ||
- | |||
- | ==== Ubuntu ==== | ||
- | <code> | ||
- | root@server:~# apt-get install freeradius | ||
- | |||
- | root@server:~# cd /etc/freeradius/ | ||
- | </code> | ||
- | |||
- | ===== Настройка сервера ===== | ||
- | <code> | ||
- | server# cat sites-available/default | ||
- | </code><code> | ||
- | ... | ||
- | # unix | ||
- | ... | ||
- | # unix | ||
- | ... | ||
- | </code><code> | ||
- | server# cat users | ||
- | </code><code> | ||
- | user1 Cleartext-Password := "rpassword1" | ||
- | |||
- | user2 Cleartext-Password := "rpassword2" | ||
- | </code><code> | ||
- | server# cat clients.conf | ||
- | </code><code> | ||
- | ... | ||
- | client gate.corpX.un { | ||
- | secret = testing123 | ||
- | shortname = gate | ||
- | } | ||
- | ... | ||
- | </code> | ||
- | |||
- | ===== Запуск сервиса ===== | ||
- | |||
- | ==== FreeBSD ==== | ||
- | <code> | ||
- | [server:~] # /usr/local/etc/rc.d/radiusd start | ||
- | </code> | ||
- | |||
- | ==== Ubuntu ==== | ||
- | <code> | ||
- | root@server:~# /etc/init.d/freeradius restart | ||
- | </code> | ||
- | |||
- | ===== Использование pam radius для сервиса login ===== | ||
- | ==== FreeBSD ==== | ||
- | <code> | ||
- | [gate:~] # cat /etc/radius.conf | ||
- | auth server testing123 3 2 | ||
- | |||
- | [gate:~] # cat /etc/pam.d/login | ||
- | ... | ||
- | auth sufficient pam_radius.so no_warn try_first_pass | ||
- | auth include system | ||
- | ... | ||
- | </code> | ||
- | |||
- | ==== Ubuntu ==== | ||
- | <code> | ||
- | root@gate:~# apt-get install libpam-radius-auth freeradius-utils | ||
- | |||
- | root@gate:~# cat /etc/pam_radius_auth.conf | ||
- | ... | ||
- | server testing123 3 | ||
- | ... | ||
- | |||
- | root@gate:~# cat /etc/pam.d/login | ||
- | ... | ||
- | auth sufficient pam_radius_auth.so | ||
- | # Standard Un*x authentication. | ||
- | ... | ||
- | </code> | ||
- | |||
- | ==== Верните настройки /etc/pam.d/login в исходное состояние ==== |