freeradius-client-1.1.6 安裝
（1）安裝非常簡單，和普通軟件相同都是下面三步：
| ./configure
make
make install
|
（2）編譯后生成的可執行程序
| /usr/local/sbin/
|-- sbin
|-- radacct 發送計費包
|-- radembedded 生成配置文件
|-- radexample 發送鑒權包
|-- radiusclient 發送鑒權包
|-- radlogin 發送鑒權包
`-- radstatus 查看服務器狀態
|
（3）配置文件目錄
| /usr/local/etc/radiusclient
|-- radiusclient
|-- dictionary 屬性字典
|-- dictionary.ascend
|-- dictionary.compat
|-- dictionary.merit
|-- dictionary.sip
|-- issue
|-- port-id-map
|-- radiusclient.conf 客戶端的配置文件
`-- servers 服務器配置文件
|
freeradius-client-1.1.6 配置
（1）/usr/local/etc/radiusclient/radiusclient.conf
| #鑒權順序
auth_order radius,local
#login 登陸次數
login_tries 1
#超時時間，單位：秒
login_timeout 5
nologin /etc/nologin
issue /usr/local/etc/radiusclient/issue
#鑒權服務器IP或name，也可以加上端口、共享口令,例：localhost:1812:testing
authserver localhost
#計費服務器IP或name
acctserver localhost
服務器共享口令文件路徑
servers /usr/local/etc/radiusclient/servers
dictionary /usr/local/etc/radiusclient/dictionary
login_radius /usr/local/sbin/login.radius
seqfile /var/run/radius.seq
mapfile /usr/local/etc/radiusclient/port-id-map
#默認域名
default_realm
#radius 登陸超時時間，單位：秒
radius_timeout 5
#radius 登陸次數
radius_retries 1
radius_deadtime 0
bindaddr *
#本地登陸 程序
login_local /bin/login
|
（2）/usr/local/etc/radiusclient/servers
freeradius-server-2.1.10 簡單安裝和配置（為測試client）
（1）安裝
| ./configure
make
make install
|
（2）/usr/local/etc/raddb/user (用戶名：jj 口令：jj)
| jj Cleartext-Password := "jj"
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-IP-Address = 192.168.2.179,
Framed-IP-Netmask = 255.255.255.0,
Framed-Routing = Broadcast-Listen,
Framed-Filter-Id = "std.ppp",
Framed-MTU = 1500,
Framed-Compression = Van-Jacobsen-TCP-IP
|
（3）/usr/local/etc/raddb/clients.conf
| client localhost {
#共享口令
secret = testing123
shortname = private-network
}
|
測試結果：
| 運行radius服務器
[root@localhost freeradius-client-1.1.6]# radiusd -X
測試客戶端
[root@localhost freeradius-client-1.1.6]# radlogin
($Id: radlogin.c,v 1.9 2008/01/09 07:04:18 sobomax Exp $)
-----------------------------------------------------
Linux 2.6.18-164.el5 (localhost.localdomain) (port 0)
-----------------------------------------------------
login: jj
Password:
RADIUS: Authentication OK
This is the dummy login.radius script. If you want that this script
does something useful you'll have to replace it.
The following RADIUS environment variables are set:
RADIUS_FILTER_ID=std.ppp
RADIUS_FRAMED_COMPRESSION=Van-Jacobson-TCP-IP
RADIUS_FRAMED_IP_ADDRESS=192.168.2.179
RADIUS_FRAMED_IP_NETMASK=255.255.255.0
RADIUS_FRAMED_MTU=1500
RADIUS_FRAMED_PROTOCOL=PPP
RADIUS_FRAMED_ROUTING=Broadcast-Listen
RADIUS_SERVICE_TYPE=Framed-User
RADIUS_USER_NAME=jj
Bye, bye.
|
| [root@localhost freeradius-client-1.1.6]# radexample
login: jj
Password:
"jj" RADIUS Authentication OK
|
| [root@localhost freeradius-client-1.1.6]# radacct（回車）
User-Name=jj
Password=jj
Acct-Status-Type=7 (按Ctrl+D)
RADIUS accounting OK
|
