radius服务器mysql连接数_Radius服务器搭建

原标题：Radius服务器搭建

RADIUS是基于UDP的一种客户机/服务器协议

安装rpm包

rpm -ivh log4cxx-0.10.0-16.el7.x86_64.rpm

rpm -ivh tncfhh-0.8.3-16.el7.x86_64.rpm

rpm -ivh xerces-c-3.1.1-8.el7_2.x86_64.rpm

rpm -ivh tncfhh-utils-0.8.3-16.el7.x86_64.rpm

rpm -ivh tncfhh-libs-0.8.3-16.el7.x86_64.rpm

rpm -ivh freeradius-3.0.4-6.el7.x86_64.rpm

rpm -ivh freeradius-mysql-3.0.4-6.el7.x86_64.rpm

rpm -ivh freeradius-utils-3.0.4-6.el7.x86_64.rpm

查看radius服务是否已起来

[root@tfg109 ~]# systemctl status radiusd.service

[0m radiusd.service - FreeRADIUS high performance RADIUS server.

Loaded: loaded (/usr/lib/systemd/system/radiusd.service; disabled; vendor preset: disabled)

Active: active (running) since Mon 2001-05-28 15:54:31 CST; 14h ago

Process: 5195 ExecStart=/usr/sbin/radiusd -d /etc/raddb (code=exited, status=0/SUCCESS)

Process: 5171 ExecStartPre=/usr/sbin/radiusd -C (code=exited, status=0/SUCCESS)

Process: 5169 ExecStartPre=/bin/chown -R radiusd.radiusd /var/run/radiusd (code=exited, status=0/SUCCESS)

Main PID: 5264 (radiusd)

CGroup: /system.slice/radiusd.service

5264 /usr/sbin/radiusd -d /etc/raddb

May 28 15:54:31 tfg109 systemd[1]: Starting FreeRADIUS high performance RADIUS server....

May 28 15:54:31 tfg109 systemd[1]: Started FreeRADIUS high performance RADIUS server..

也可以通过radiusd -X以调试方式启动

radiusd -X

修改客户端配置文件

vi /etc/raddb/clients.conf

client localhost{

ipaddr = 127.0.0.1

secret = testing123

shortname = localhost

nastype = other

}

使用file后端检测认证流程

(1)修改用户配置文件，把steve用户的注释放开

vi /etc/raddb/users

steve Cleartext-Password := "testing"

Service-Type = Framed-User,

Framed-Protocol = PPP,

Framed-IP-Address = 172.16.3.33,

Framed-IP-Netmask = 255.255.255.0,

Framed-Routing = Broadcast-Listen,

Framed-Filter-Id = "std.ppp",

Framed-MTU = 1500,

Framed-Compression = Van-Jacobsen-TCP-IP

(2)修改radiusd配置，使用file作为用户认证后端

vi /etc/raddb/sites-available/default

找到authorize段，把files的注释放开

# Read the 'users' file

files

(3)使用调试工具radtest测试

[root@tfg109 ~]# radtest steve testing localhost 0 testing123

Sending Access-Request Id 200 from 0.0.0.0:37617 to 127.0.0.1:1812

User-Name = 'steve'

User-Password = 'testing'

NAS-IP-Address = 127.0.0.1

NAS-Port = 0

Message-Authenticator = 0x00

Received Access-Accept Id 200 from 127.0.0.1:1812 to 127.0.0.1:37617 length 71

Service-Type = Framed-User

Framed-Protocol = PPP

Framed-IP-Address = 172.16.3.33

Framed-IP-Netmask = 255.255.255.0

Framed-Routing = Broadcast-Listen

Filter-Id = 'std.ppp'

Framed-MTU = 1500

Framed-Compression = Van-Jacobson-TCP-IP

使用mysql后端

(1)创建radius数据库

mysql＞create database radius;

mysql＞grant all on radius.* to 'radius'@'%' identified by 'radius';

mysql＞exit;

(2)导入数据库表

cd /etc/raddb/mods-config/sql/main/mysql

mysql -u root radius ＜ ./scheama.sql

上面的指令，共导入了7个表，分别是：

radcheck 用户检查信息表

radreply 用户回复信息表

radgroupcheck 用户组检查信息表

radgroupreply 用户组回复信息表

radusergroup 用户和组关系表

radacct 计费情况表

radpostauth 认证后处理信息，可以包括认证请求成功和拒绝的记录。

(3)导入用户信息

建立组信息：(在此新建组名称为user)

insert into radgroupreply (groupname,attribute,op,value) values ('user','Auth-Type',':=','Local');

insert into radgroupreply (groupname,attribute,op,value) values ('user','Service-Type',':=','Framed-User');

insert into radgroupreply (groupname,attribute,op,value) values ('user','Framed-IP-Address',':=','255.255.255.255');

insert into radgroupreply (groupname,attribute,op,value) values ('user','Framed-IP-Netmask',':=','255.255.255.0');

建立用户信息：(在此新建用户名为test，密码为testpwd)

insert into radcheck (username,attribute,op,value) values ('test','Cleartext-Password',':=','test');

将用户加入组中：

insert into radusergroup (username,groupname) values ('test','user');

(4)配置sql模块

[root@tfg109 ~]# vi /etc/raddb/mods-available/sql

sql {

driver = "rlm_sql_mysql"

dialect = "mysql"

# Connection info:

#

server = "localhost"

port = 29998

login = "radius"

password = "radius"

# Database table configuration for everything except Oracle

radius_db = "radius"

}

(5)修改/etc/raddb/sites-available/default

找到authorize段，放开-sql的注释

(6)使用调试工具radtest测试

[root@tfg109 ~]# radtest test test localhost 0 testing123

Sending Access-Request Id 99 from 0.0.0.0:65513 to 127.0.0.1:1812

User-Name = 'test'

User-Password = 'test'

NAS-IP-Address = 127.0.0.1

NAS-Port = 0

Message-Authenticator = 0x00

Received Access-Accept Id 99 from 127.0.0.1:1812 to 127.0.0.1:65513 length 38

Service-Type = Framed-User

Framed-IP-Address = 255.255.255.255

Framed-IP-Netmask = 255.255.255.0

附：2017年上半年云开源优秀文章评选《三等奖》文章列表

刘雪峰

姜涛、刘朝阳

刘雪峰、曾建芳

阎松明

责任编辑：