GNU Radius Reference Manual

The GNU Radius

GNU Radius is a suite of programs for performing user authentication and accounting using RADIUS protocol.

This Info file documents the version 1.7 of the package.

Table of Contents

Introduction to Radius
- Overview
1 Naming Conventions
2 How Radius Operates
- 2.1 Attributes
- 2.2 RADIUS Requests
  - 2.2.1 Authentication Requests
  - 2.2.2 Accounting Requests
- 2.3 Matching Rule
- 2.4 Processing Requests
3 How to Start the Daemon.
4 Radius Configuration Files
- 4.1 Run-Time Configuration Options — raddb/config
- 4.2 Dictionary of Attributes — raddb/dictionary
- 4.3 Clients List — raddb/clients
  - 4.3.1 Example of clients file
- 4.4 NAS List — raddb/naslist
  - 4.4.1 Example of naslist file
- 4.5 NAS Types — raddb/nastypes
- 4.6 Request Processing Hints — raddb/hints
  - 4.6.1 Example of hints file
- 4.7 Huntgroups — raddb/huntgroups
  - 4.7.1 Example of huntgroups file.
- 4.8 List of Proxy Realms — raddb/realms
  - 4.8.1 Example of realms file
- 4.9 User Profiles — raddb/users
  - 4.9.1 Example of users file
- 4.10 List of Blocked Users — raddb/access.deny
- 4.11 SQL Configuration — raddb/sqlserver
- 4.12 Rewrite functions — raddb/rewrite
- 4.13 Login Menus — raddb/menus
  - 4.13.1 A menu file syntax.
  - 4.13.2 An example of menu files
- 4.14 Macro Substitution
5 Request Comparison Methods
- 5.1 Extended Comparison
  - 5.1.1 An example of extended comparison configuration
  - 5.1.2 List of attributes that can be declared comparable.
- 5.2 Fine-Tuning the Request Queue
6 Authentication
- 6.1 Accept Authentication Type
- 6.2 Reject Authentication Type
- 6.3 Local Password Authentication Type
- 6.4 Encrypted Password Authentication Type
- 6.5 System Authentication Type
- 6.6 SQL Authentication Type
- 6.7 PAM Authentication Type
- 6.8 Defining Custom Authentication Types
- 6.9 Multiple Login Checking
  - 6.9.1 Retrieving Session Data
  - 6.9.2 Verifying Active Sessions
- 6.10 Controlling Authentication Probes
7 Accounting
- 7.1 System Accounting
- 7.2 Detailed Request Accounting
- 7.3 sql Accounting
- 7.4 Defining Custom Accounting Types
8 Logging
9 Problem Tracking
- 9.1 Rule Tracing
- 9.2 Debugging
- 9.3 Test Mode
10 Extensions
- 10.1 Filters
- 10.2 Rewrite
- 10.3 Guile
11 Utility Programs
- 11.1 radwho
- 11.2 radlast
  - 11.2.1 radlast Command Line Options
- 11.3 radzap
- 11.4 radgrep
- 11.5 radping
- 11.6 radauth
- 11.7 radctl
- 11.8 builddbm
- 11.9 radscm: A Guile Interface to Radius Functions
12 Client Package
- 12.1 Client Configuration
- 12.2 radtest
- 12.3 radsession
- 12.4 nas.scm
- 12.5 pam_radius.so
13 Attribute List
- 13.1 Authentication Attributes
- 13.2 Accounting Attributes
- 13.3 Radius Internal Attributes
14 Reporting Bugs
15 Where to Get Information about GNU Radius
How to Obtain Radius
Radius Glossary
Acknowledgements
Appendix A New Configuration Approach (draft)
- A.1 A brief description of Currently Used Approach
- A.2 Deficiencies of Current Operation Model and Configuration Suite
- A.3 Proposed Solution
- A.4 Changes to Rewrite Language
- A.5 Support for Traditional Configuration Files.
- A.6 New Configuration Files
Index