1 |
I. Installation |
* Installation |
2 |
--------------------- |
|
3 |
|
Before installing, take a glance at doc/MACHINES, it may describe some |
4 |
Before installing, take a glance at doc/MACHINES, it |
issues, specific to your configuration. |
5 |
may describe some issues, specific to your configuration. |
|
6 |
To install the package, do: |
To install the package, do: |
7 |
|
|
8 |
1. ./configure [options] |
** ./configure [options] |
9 |
|
|
10 |
For the list of available options consult file INSTALL. |
For the list of available options consult file INSTALL. |
11 |
The applications-specific options are: |
The applications-specific options are: |
12 |
|
|
13 |
--disable-debug |
*** --disable-debug |
14 |
Disable debugging functions. This results in slightly more compact |
Disable debugging functions. This results in slightly more compact |
15 |
code, but makes configuration issues difficult to debug. Use at |
code, but makes configuration issues difficult to debug. Use at |
16 |
your own risk. |
your own risk. |
17 |
|
|
18 |
--with-auth-port=NUMBER |
*** --with-auth-port=NUMBER |
19 |
Specify port number to use for authentication. Default is 1812. |
Specify port number to use for authentication. Default is 1812. |
20 |
The default port number for accounting is computed as auth_port + 1. |
The default port number for accounting is computed as auth_port + 1. |
21 |
|
|
22 |
--with-include-path=STRING |
*** --with-include-path=STRING |
23 |
Specify any additional include directories that are required for |
Specify any additional include directories that are required for |
24 |
your configuration. Multiple directories are separated by colons. |
your configuration. Multiple directories are separated by colons. |
25 |
|
|
26 |
--with-lib-path=STRING |
*** --with-lib-path=STRING |
27 |
Specify any additional library directories that are required for |
Specify any additional library directories that are required for |
28 |
your configuration. Multiple directories are separated by |
your configuration. Multiple directories are separated by |
29 |
colons. |
colons. |
30 |
|
|
31 |
--enable-shadow |
*** --enable-shadow |
32 |
Enable shadow support. Use this only if ./configure was unable to |
Enable shadow support. Use this only if ./configure was unable to |
33 |
correctly determine if it should use the shadow support. |
correctly determine if it should use the shadow support. |
34 |
|
|
35 |
--enable-pam |
*** --enable-pam |
36 |
Enable PAM support. |
Enable PAM support. |
37 |
|
|
38 |
--enable-dbm[={dbm|ndbm}] |
*** --enable-dbm[={dbm|ndbm}] |
39 |
Enable dbm support. If no argument is specified, usual DBM is |
Enable dbm support. If no argument is specified, usual DBM is |
40 |
assumed. The `ndbm' argument instructs to enable support of NDBM. |
assumed. The `ndbm' argument instructs to enable support of NDBM. |
41 |
|
|
42 |
--with-mysql |
*** --with-mysql |
43 |
Enable MySQL support. Usually this requires adding appropriate |
Enable MySQL support. Usually this requires adding appropriate |
44 |
--with-lib-path and --with-include-path options. |
--with-lib-path and --with-include-path options. |
45 |
|
|
46 |
--with-postgres |
*** --with-postgres |
47 |
Enable PostgreSQL support. Usually this requires adding appropriate |
Enable PostgreSQL support. Usually this requires adding appropriate |
48 |
--with-lib-path and --with-include-path options. |
--with-lib-path and --with-include-path options. |
49 |
|
|
50 |
--with-odbc[={odbc|iodbc}] |
*** --with-odbc[={odbc|iodbc}] |
51 |
Configure to work with ODBC. This is an experimental feature, it |
Configure to work with ODBC. This is an experimental feature, it |
52 |
has not been tested thoroughly. |
has not been tested thoroughly. |
53 |
|
|
54 |
--without-guile |
*** --without-guile |
55 |
Do not compile Guile support. |
Do not compile Guile support. |
56 |
|
|
57 |
--without-server-guile |
*** --without-server-guile |
58 |
Do not compile server Guile support |
Do not compile server Guile support |
59 |
|
|
60 |
--with-client |
*** --with-client |
61 |
Build client programs. Requires presence of Guile >=1.4 and |
Build client programs. Requires presence of Guile >=1.4 and |
62 |
PAM on your system. |
PAM on your system. |
63 |
|
|
64 |
--with-pamdir=DIR |
*** --with-pamdir=DIR |
65 |
Install PAM modules in the given DIR. Default is |
Install PAM modules in the given DIR. Default is |
66 |
$prefix/lib/security. |
$prefix/lib/security. |
67 |
|
|
68 |
--enable-snmp[=compat] |
*** --enable-snmp[=compat] |
69 |
Enable SNMP support. By default this enables the use of enterprise |
Enable SNMP support. By default this enables the use of enterprise |
70 |
subtree .iso.org.dod.internet.private.enterprises.gnu.radius |
subtree .iso.org.dod.internet.private.enterprises.gnu.radius |
71 |
(.1.3.6.1.4.1.11591.1). To enable support for the subtree used |
(.1.3.6.1.4.1.11591.1). To enable support for the subtree used |
74 |
.1.3.6.1.4.1.9163) use --enable-snmp=compat form of this |
.1.3.6.1.4.1.9163) use --enable-snmp=compat form of this |
75 |
option. |
option. |
76 |
|
|
77 |
--enable-livingston-menus |
*** --enable-livingston-menus |
78 |
Enable support for Livingston-compatible menus. |
Enable support for Livingston-compatible menus. |
79 |
|
|
80 |
--enable-deny-shell=SHELL |
*** --enable-deny-shell=SHELL |
81 |
Always reject users with given shell. |
Always reject users with given shell. |
82 |
|
|
83 |
2. Run make. |
** Run make. |
84 |
|
|
85 |
The GNU make is preferred. |
The GNU make is preferred. |
86 |
|
|
87 |
3. Check it. |
** Check it. |
88 |
|
|
89 |
You can check the functionality of the package without installing |
You can check the functionality of the package without installing |
90 |
it. To do so, run |
it. To do so, run |
91 |
|
|
92 |
make check |
make check |
93 |
|
|
94 |
(You have to have DejaGNU installed on your system). |
(You have to have DejaGNU installed on your system). |
95 |
|
|
96 |
4. make install |
** Run `make install' |
97 |
|
|
98 |
5. If you wish to install manual pages, do |
** If you wish to install manual pages, do |
99 |
|
|
100 |
make install-man. |
make install-man. |
101 |
|
|
102 |
Please note, that the information in man pages is no longer being |
Please note, that the information in man pages is no longer being |
103 |
maintained and can therefore be inaccurate or incomplete. The |
maintained and can therefore be inaccurate or incomplete. The |
104 |
Info files are the authoritative documentation. |
Info files are the authoritative documentation. |
105 |
|
|
106 |
II. Creating SQL database. |
* Creating SQL database. |
107 |
------------------------------- |
|
108 |
|
If you have configured Radius with SQL support, you may wish |
109 |
Follow the procedure, described below if you have configured |
to create the authentication and accounting database. Notice, |
110 |
Radius with SQL support: |
that if you already have a running database, you may continue |
111 |
|
using it with GNU Radius. You will only have to modify file |
112 |
1. Change to the subdirectory db/ |
raddb/sqlserver to match your database structure. |
113 |
2. Edit file config.m4. Most of its contents is commented out, so |
|
114 |
uncomment anything that may be needed. Variables are: |
To create a fresh Radius database, follow the procedure below: |
115 |
|
|
116 |
|
** Change to the subdirectory db/ |
117 |
|
** Edit file config.m4. Most of its contents is commented out, so |
118 |
|
uncomment anything that may be needed. Variables are: |
119 |
|
|
120 |
server - SQL server name or IP address |
server - SQL server name or IP address |
121 |
port - port to connect to |
port - port to connect to |
131 |
DB_PWD - SQL password. |
DB_PWD - SQL password. |
132 |
(These must coincide with the values in raddb/sqlserver file) |
(These must coincide with the values in raddb/sqlserver file) |
133 |
|
|
134 |
3. Depending on the type of SQL server you are using, run either |
** Depending on the type of SQL server you are using, run either |
135 |
`make mysql' or `make pgsql'. |
`make mysql' or `make pgsql'. |
136 |
|
|
137 |
To get the database structure without creating it, run |
To get the database structure without creating it, run |
138 |
`make mysql.struct' or `make pgsql.struct'. |
`make mysql.struct' or `make pgsql.struct'. |
139 |
|
|
140 |
III. Upgrade |
* Upgrading from earlier versions of GNU Radius |
|
------------------- |
|
141 |
|
|
142 |
Please, read file NEWS. It describes all the new features, |
Please, read file NEWS. It describes all the new features, |
143 |
introduced with version 1.0 as well as its basic differences |
introduced with version 1.0 as well as its basic differences |
144 |
from the 0.96 series. |
from the 0.96 series. |
145 |
|
|
146 |
IV. Configuring |
* Configuring |
|
---------------------- |
|
147 |
|
|
148 |
Be sure to read accompanying documentation. The online documentation |
Be sure to read accompanying documentation. The online documentation |
149 |
is available at http://www.gnu.org/software/radius/manual. |
is available at http://www.gnu.org/software/radius/manual. |
150 |
If you need help, subscribe to <help-gnu-radius@gnu.org> and send your |
If you need help, subscribe to <help-gnu-radius@gnu.org> and send your |
151 |
questions there. To subscribe, visit |
questions there. To subscribe, visit |
152 |
|
|
153 |
http://mail.gnu.org/mailman/listinfo/help-gnu-radius |
http://mail.gnu.org/mailman/listinfo/help-gnu-radius |
154 |
|
|
155 |
Before asking a question, it will be a good idea to look through |
Before asking a question, it will be a good idea to look through |
156 |
the mailing archives on the same page, as they might already |
the mailing archives on the same page, as they might already |
157 |
contain the answer. |
contain the answer. |
158 |
|
|
159 |
V. Testing. |
* Testing. |
|
------------------ |
|
160 |
|
|
161 |
Both commands described below use the configuration file |
The commands described below use the configuration file |
162 |
raddb/client.conf. See the documentation for the detailed |
raddb/client.conf. See the documentation for the detailed description |
163 |
description of it. |
of this file. |
164 |
|
|
165 |
Use radauth to send authentication requests to the running |
Use radauth to send authentication requests to the running |
166 |
server. The invocation syntax is: |
server. The invocation syntax is: |
167 |
|
|
168 |
radauth [-v][-sSERVER:SECRET[:PORT]] username [pass] |
radauth [-v][-sSERVER:SECRET[:PORT]] username [pass] |
169 |
|
|
170 |
The -v (--verbose) option produces verbose output. The -s (--server) |
The -v (--verbose) option produces verbose output. The -s (--server) |
171 |
option allows to set the parameters of the radius server to send |
option allows to set the parameters of the radius server to send |
172 |
the request to. |
the request to. |
173 |
|
|
174 |
If you have guile version 1.4 or better installed, you can use |
If you have guile version 1.4 or better installed, you can use |
175 |
radsession script to send authentication/accounting requests |
radsession script to send authentication/accounting requests |
176 |
to the server. To do so, you will first need to edit your |
to the server. To do so, you will first need to edit your |
177 |
raddb/client.conf file. The template installed from the distribution |
raddb/client.conf file. The template installed from the distribution |
178 |
should suffice to test the server in default configuration. |
should suffice to test the server in default configuration. |
179 |
|
|
180 |
|
** Authentication test |
181 |
|
|
182 |
1. To test authentication do |
radsession -l LOGIN -p PASSWD -P PORT-ID --auth |
183 |
|
|
184 |
radsession -l LOGIN -p PASSWD -P PORT-ID --auth |
** Accounting test |
185 |
|
|
186 |
2. To test accounting do |
To test accounting do: |
187 |
|
|
188 |
radsession -l LOGIN -p PASSWD -P PORT-ID -s SESSION-ID --start |
radsession -l LOGIN -p PASSWD -P PORT-ID -s SESSION-ID --start |
189 |
or |
or |
190 |
radsession -l LOGIN -P PORT-ID -s SESSION-ID --stop |
radsession -l LOGIN -P PORT-ID -s SESSION-ID --stop |
191 |
|
|
192 |
Here, |
Where: |
193 |
LOGIN is the user's login name |
LOGIN is the user's login name |
194 |
PASSWD is his password. Use `.' (dot) to get prompted |
PASSWD is his password. Use `.' (dot) to get prompted |
195 |
for the password as passwd(1) does. |
for the password as passwd(1) does. |
200 |
a session ID of a previously started session |
a session ID of a previously started session |
201 |
when used with --stop option. |
when used with --stop option. |
202 |
|
|
203 |
For example, supposing user `hamlet' has an entry in the users file, |
For example, supposing user `hamlet' has an entry in the users file, |
204 |
the following would authenticate it and open a session for it: |
the following would authenticate him and open a session for him: |
205 |
|
|
206 |
radsession -l hamlet -p guessme -P 1 -s "0001" --start |
radsession -l hamlet -p guessme -P 1 -s "0001" --start |
207 |
|
|
208 |
Now, if you run radwho, you would get something like: |
Now, if you run radwho, you would get something like: |
209 |
|
|
210 |
Login Name What TTY When From Location |
Login Name What TTY When From Location |
211 |
hamlet hamlet PPP S001 Mon 07:22 localhost 255.255.255.254 |
hamlet hamlet PPP S001 Mon 07:22 localhost 255.255.255.254 |
212 |
|
|
213 |
radlast shows the following; |
radlast shows the following; |
214 |
|
|
215 |
hamlet local 001 127.0.0.2 Thu Mon 07 07:22 - still logged in |
hamlet local 001 127.0.0.2 Thu Mon 07 07:22 - still logged in |
216 |
|
|
217 |
radwtmp begins Fri Dec 01 16:36:59 2000 |
radwtmp begins Fri Dec 01 16:36:59 2000 |
218 |
|
|
219 |
Then, suppose you run: |
Then, suppose you run: |
220 |
|
|
221 |
radsession -l hamlet -P 1 -s "0001" --stop |
radsession -l hamlet -P 1 -s "0001" --stop |
222 |
|
|
223 |
This will send a stop record for session 0001. Radlast would then show |
This will send a stop record for session 0001. Radlast would then show |
224 |
something like: |
something like: |
225 |
|
|
226 |
hamlet local 001 127.0.0.2 Thu Mon 07 07:22 - 07:25 (00:03) |
hamlet local 001 127.0.0.2 Thu Mon 07 07:22 - 07:25 (00:03) |
227 |
|
|
228 |
radwtmp begins Fri Dec 01 16:36:59 2000 |
radwtmp begins Fri Dec 01 16:36:59 2000 |
229 |
|
|
230 |
VI. Bug reporting. |
* Bug reporting. |
|
---------------------- |
|
231 |
|
|
232 |
Send bug reports to <bug-gnu-radius@gnu.org>. |
Send bug reports to <bug-gnu-radius@gnu.org>. |
233 |
|
|
234 |
|
|
235 |
Local Variables: |
Local Variables: |
236 |
mode: indented-text |
mode: outline |
237 |
indent-tabs-mode: nil |
paragraph-separate: "[ ]*$" |
|
tab-stop-list: (4 8 12 16 20 24 28 32 36 40 44 48 52 56 60 64 68 72 76) |
|
|
left-margin: 4 |
|
|
fill-column: 74 |
|
238 |
version-control: never |
version-control: never |
239 |
End: |
End: |