Time for action – using a virtual server
Follow these steps to make a virtual server available:
- Edit the
radiusd.conf
file in the FreeRADIUS configuration directory and add the following to thelisten
section that containstype = auth
(there are twolisten
sections, one hastype = auth
, the other hastype = acct
):virtual_server = always_accept.
- Restart FreeRADIUS in debug mode.
- Try to authenticate any user with any password. Your request should be accepted every time.
- Observe the debug output when FreeRADIUS accepts the request.
- Edit the
radiusd.conf
file again, but this time change thevirtual_server
directive fromvirtual_server = always_accept
tovirtual_server = always_reject
. - Restart FreeRADIUS in debug mode.
- Try to authenticate specifying any user with any password. Your request should be rejected every time.
- Observe the debug output when FreeRADIUS rejects the request.
- On completion of this exercise comment the
virtual_server
directive out again. This will leave the FreeRADIUS server...