freeradius+mysql+pppoe认证
1.首先下载要安装的软件包如下：radiusclient-0.3.2.tar.gz
ppp-2.4.3.tar.gz
freeradius-server-2.1.12.tar.gz
在安装之前要确保pppoe-server已经安装
# rpm -q rp-pppoe ppp
rp-pppoe-3.5-32.1
ppp-2.4.4-2.el5
2.安装freeradius-server
# tarxvf freeradius-server-2.1.12.tar.gz
# ./configure
# make && make install
进入以下目录就会看到安装的信息
# cd /usr/local/bin/
# ls
radclient radcrypt radlast radtestradzap
radconf2xmlradeapclientradsqlrelayradwho smbencrypt
# cd /usr/local/sbin/
# ls
checkrad radacct radexampleradloginradstatusrc.radiusd
login.radiusraddebugradiusd radmin radwatch
# cd /usr/local/etc/raddb/
# ls
acct_users clients.conf ldap.attrmap sites-available
attrs dictionary modules sites-enabled
attrs.access_challenge eap.conf policy.conf sql
attrs.access_reject example.pl policy.txt sql.conf
attrs.accounting_responseexperimental.confpreproxy_userssqlippool.conf
attrs.pre-proxy hints proxy.conf templates.conf
certs huntgroups radiusd.conf users
3.测试radius
#vi users
去掉前面的注释steveCleartext-Password := "testing"
#radius-X
... adding new socket proxy address * port 52873
Listening on authentication address * port 1812
Listening on accounting address * port 1813
Listening on command file /usr/local/var/run/radiusd/radiusd.sock
Listening on authentication address 127.0.0.1 port 18120 as server inner-tunnel
Listening on proxy address * port 1814
Ready to process requests.
证明能正常启动
#radtest stevetesting localhost 0 testing123
看到Access-Accept证明测试成功
4.安装radiusclient
不安装就会缺少依赖的文件
# tar xvf radiusclient-0.3.2.tar.gz
# ./configure
# make && make install
5.配置pppd使其与radius一起工作
# tar xvf ppp-2.4.3.tar.gz
#mkdir/etc/ppp/radius
#cp ppp-2.4.3/pppd/plugins/radius/etc/* /etc/ppp/radius
6.配置pppoe
配置/etc/ppp/pppoe-server-options文件
# PPP options for the PPPoE server
# LIC: GPL
require-chap
login
lcp-echo-interval 10
lcp-echo-failure 2
ms-dns 202.106.0.20
ms-dns 8.8.8.8
noipdefault
noipx
nodefaultroute
proxyarp
noktune
plugin /usr/lib/pppd/2.4.4/radius.so
radius-config-file /etc/ppp/radius/radiusclient.conf
logfile /var/log/pppd.log //记录拨号信息
配置/etc/ppp/ chap-secrets
# Secrets for authentication using CHAP
# client serversecret IP addresses
ttt * 123 *
然后可以启动pppoe服务了，命令是： # /usr/sbin/pppoe-server -I eth0 -L 192.168.85.132 -R 172.16.10.20 -N 20
通过电脑就可以拨号连接了
7.通过数据库拨号认证，下来安装配置数据库
yum install mysql-servermysql-devel
创建数据库
mysql-p
#create database radius;
#exit;
cd /usr/local/etc/raddb/sql/mysql
mysql -p radius
页:
[1]