OpenRADIUS
OpenRADIUS is a RADIUS server that links your network access
devices to your user-, service profile-, and usage databases.
OpenRADIUS has a powerful external module
interface that uses pre-spawned subprocesses and pipes for
communication, allowing you to implement modules in any language that
supports Unix pipe I/O. Its behaviour is fully configurable, using a
simple built-in language that gives you full control over the request
and reply list.
It includes versatile LDAP and SQL modules, a full
featured RADIUS client, and a fully functional example configuration
for metered pre-paid accounts.
Features include:
- Ability to get shared secrets, authentication information,
policies and user profiles from any available external data source
- Support for password databases, including NIS/NIS+,
Livingston-style ASCII files, LDAP directories and SQL databases out of
the box
- Fully customizeable authentication schemes and security
policies, using a built-in business rule language
- Simple, scaleable and fully documented module interface.
Modules may supply data such as user information, and may also store
data such as logging and accounting
- Modules can be written in any language that supports ASCII
or binary Unix pipe I/O
- The interface allows multiple module subprocesses to be
started for each data source, allowing modules to be single-threaded
while retaining support for multiple concurrent requests to the same
data source
- Flexible dictionary that can be made to support
any type of non-standard vendor-specific attribute, including multiple
attributes inside the same VSA, non-standard attribute IDs or length
fields, subfields, and much more
- Binds to a single or multiple IP addresses/network cards,
and listen on multiple ports;
Return
to Network Authentication Servers Home Page
Last Updated Saturday, April 14 2012 @ 06:21 AM EDT |