radius_freebsd.pdf

(215 KB) Pobierz
232413516 UNPDF
FreeRADIUS Install and
Configuration
Joel Jaeggli
05/04/2006
 
 
What is RADIUS?
● A AAA protocol (Authentication, Authorization
and Accounting).
● Authentication – Confirmation that the user is
who they say they are. Authentication is
accomplished through the presentation of
credentials.
● Authorization – Granting access to specific
types of service or resource.
 
● Accounting – Tracking the consumption of
resources.
 
What is RADIUS? - Continued
● Radius was originally developed by Livingston
for the Portmaster series of network
access/terminal servers.
● Remote authentication dial-in user service.
● Eventually it was published as RFC 2058 and
2059. The current incarnation is embodied in
RFC 2865.
 
 
What does RADIUS do?
● A radius client, which originally would have
been a NAS device, but now lots of services
can leverage Radius for authentication.
● A radius client takes a user name, some client
specific information and a password hashed
using a secret shared with the radius server,
and uses that to create an authentication
request.
 
 
What does RADIUS do? - continued
● The server looks up the values presented in the
authentication request from flat text files, unix
password files, database servers or ldap.
Hashes them to compare with the request
hashed values, and returns an access-accept
packet or reject packet on based on the
success or failure of the authentication request.
 
 

Plik z chomika:

Inne pliki z tego folderu:

Inne foldery tego chomika:

Zgłoś jeśli naruszono regulamin