Differences between version 9 and predecessor to the previous major change of RADIUS.
Other diffs: Previous Revision, Previous Author, or view the Annotated Edit History
| Newer page: | version 9 | Last edited on Sunday, November 21, 2004 6:27:09 pm | by AristotlePagaltzis | Revert |
| Older page: | version 8 | Last edited on Saturday, November 20, 2004 9:13:04 pm | by OriEt | Revert |
@@ -1,22 +1,17 @@
-[Acronym] for Remote Authentication Dial In User Service
.
+An
[Acronym] for __R__emote __A__uthentication __D__ial __I__n __U__ser __S__ervice
.
-RADIUS servers are used for authentication
[1
], authorization[2]
and accounting[3]
for terminals that speak the RADIUS protocol. It was invented
by a company called Livingston.
+[RADIUS
] is an authentication
, authorization and accounting protocol
for terminals on a network, designed
by a company called Livingston. A [RADIUS] server provides a central database for authentication that the remote end of your connection to an [ISP] can query to verify your credentials. This allows the account information to be maintained in a centralized resource and even be shared among [ISP]s if they share customers or resell one another's services. Terminals share a secret with the [RADIUS] server so that not just anyone can go checking passwords against it
.
-Think of RADIUS as a central network database for authentication. You dial into your ISP and tell the system who you are and what your password is. The device will then ask a RADIUS server whether you should be allowed on and what you should be allowed to do when you are on (eg. you might be allowed to connect only during certain hours).
+Implementations:
-Your device and your RADIUS server share a secret
, so
that not just anyone can go checking passwords
against it
.
+[Linux]::
+ Check the [FreeRADIUS | http://www.freeradius.org/] project. They also provide [pam_radius_auth | http://www.freeradius.org/pam_radius_auth/]
, a [PAM] module
that lets a [Linux] system authenticate users
against a [RADIUS] server.
+[Cisco]::
+ [Cisco] gear talks [RADIUS].
+MicrosoftWindows 2000::
+ The Internet Authentication Service provides [RADIUS] services
.
-If you want a RADIUS server on Linux, see http://www.freeradius.org/. There are
also [PAM] modules that let you authenticate against a Linux system at http
://www.freeradius.org/pam_radius_auth/.
-
-[Cisco
] gear talks RADIUS. Windows 2000 has a RADIUS server http://www.alepo.com/radius-server.shtml built in called Internet Authentication Service.
-
-Nomadix
] Windows RADIUS server and Linux Radius Server http://www.aradial.com/aradial-radius-server-billing-index.html with Web Based configuration UI and supports ISP, Hotspots and VOIP. Integerated with billing solutions.
-
-
-The protocol is described in
RFC:2138
, accounting add-ons are in RFC:2139.
-
-See also
[TACACS].
-
-[1] Who are you
-[2] What are you allowed to do
-[3] What are we going to write down about it
+See
also:
+* RFC:2138, the
[RADIUS
] [Protocol
] specification
+*
RFC:2139
, the
accounting extensions specification
+*
[TACACS]
