You're reading from FreeRADIUS Beginner's Guide Master authentication, authorization, and accessing your network resources using FreeRADIUS

Product type Paperback

Published in Sep 2011

Publisher Packt

ISBN-13 9781849514088

Length 344 pages

Edition 1st Edition

Tools

FreeRADIUS

Concepts

Cloud Computing

Table of Contents (16) Chapters

Preface

What this book covers
What you need for this book
Who this book is for
Conventions
Time for action – heading
Reader feedback
Customer support

1. Introduction to AAA and RADIUS FREE CHAPTER

Authentication, Authorization, and Accounting
RADIUS
FreeRADIUS
Summary

2. Installation

Before you start
Pre-built binary
Time for action – installing FreeRADIUS
Building from source
Time for action – building CentOS RPMs
Time for action – SUSE: from tarball to RPMs
What just happened?
Ubuntu
Time for action – Ubuntu: from tarball to debs
Installed executables
Running as root or not
Dictionary access for client programs
Ensure proper start-up
Summary

3. Getting Started with FreeRADIUS

A simple setup
Time for action – configuring FreeRADIUS
Helping yourself
Time for action – discovering available man pages for FreeRADIUS
What just happened?
Have a go hero – adding more AVPs to the auth request
Pop quiz – clients.conf
Online documentation
Online help
Golden rules
Inside radiusd
Summary

4. Authentication

Authentication protocols
FreeRADIUS—authorize before authenticate
Time for action – authenticating a user with FreeRADIUS
Storing passwords
Time for action – hashing our password
Other authentication methods
Summary

5. Sources of Usernames and Passwords

User stores
System users
Time for action – incorporating Linux system users in FreeRADIUS
MySQL as a user store
Time for action – incorporating a MySQL database in FreeRADIUS
LDAP as a user store
Time for action – connecting FreeRADIUS to LDAP
Active Directory as a user store
Time for action – connecting FreeRADIUS to Active Directory
Summary

6. Accounting

Requirements for this chapter
Basic accounting
Time for action – simulate accounting from an NAS
Limiting a user's simultaneous sessions
Time for action – limiting a user's simultaneous sessions
Limiting the usage of a user
Time for action – limiting a user's usage
Housekeeping of accounting data
Summary

7. Authorization

Implementing restrictions
Authorization in FreeRADIUS
Introduction to unlang
Time for action – using the if statement in unlang
Time for action – referencing attributes
Time for action – SQL statements as variables
Time for action – setting default values for variables
Time for action – using command substitution
Time for action – using regular expressions
Practical unlang
Time for action – using unlang to create a data counter
Summary

8. Virtual Servers

Why use virtual servers?
Defining and enabling virtual servers
Time for action – creating two virtual servers
Using enabled virtual servers
Time for action – using a virtual server
Virtual server for happy hour
Time for action – incorporating the Hotspot Happy Hour policy
Consolidating an existing setup using a virtual server
Time for action – creating a virtual server for the Computer Science faculty
Pre-defined virtual servers
Summary

9. Modules

Installed, available, and missing modules
Time for action – discovering available modules
Including and configuring a module
Time for action – incorporating expiration and linelog modules
Using one module with different configurations
Order of modules and return codes
Time for action – investigating the order of modules
Some interesting modules
Summary

10. EAP

EAP basics
Practical EAP
Time for action – testing EAP on FreeRADIUS with JRadius Simulator
EAP in production
Time for action – creating a RADIUS PKI for you organization
Time for action – testing authentication on the inner-tunnel virtual server
Time for action – disabling unused EAP methods
Summary

11. Dictionaries

Why do we need dictionaries?
How to include dictionaries
Time for action – including new dictionaries
How FreeRADIUS includes dictionary files
Time for action – updating the MikroTik dictionary
Format of dictionary files
Summary

12. Roaming and Proxying

Roaming—an overview
Realms
Time for action – investigating the default realms in FreeRADIUS
Time for action – activating the NULL realm
Time for action – defining the realm
Time for action – rejecting requests without a realm
Proxying
Time for action – configuring proxying between two organizations
Have a go hero – testing proxying of EAP authentication
Time for action – filtering reply attributes returned by a home server
Time for action – using the preferred way for status checking
Time for action – simulating proxied accounting
Summary

13. Troubleshooting

Basic principles
FreeRADIUS does not start up
FreeRADIUS is slow
Time for action – performing baseline speed testing
FreeRADIUS dies
Client-related problems
Time for action – using the control-socket and raddebug for troubleshooting
Authenticating users
Problems with proxying
Online resources
Using the mailing list
Summary

A. Pop Quiz Answers

Chapter 1
Chapter 2
Chapter 3
Chapter 4
Chapter 5
Chapter 6
Chapter 7
Chapter 8
Chapter 9
Chapter 10
Chapter 11
Chapter 12
Chapter 13

Index

What you need for this book

You need to be familiar with Linux and have a solid understanding of TCP/IP. No previous knowledge of RADIUS or FreeRADIUS is required.

To get the most out of the practical exercises you will need a clean install of Ubuntu, SUSE or CentOS

The rest of the chapter is locked

You're reading from FreeRADIUS Beginner's Guide Master authentication, authorization, and accessing your network resources using FreeRADIUS

Table of Contents (16) Chapters

What you need for this book

Unlock this book and the full library FREE for 7 days

Personalised recommendations for you