[P]Delete

This document describes how to setup a FreeRADIUS server. A MySQL server is used as backend and for the user accounting. RADIUS is an industry-standard protocol for providing authentication, authorization, and accounting services. Authentication is the process of verifying a user’s identity and associating additional information (attributes) to the user’s login session. Authorization is the process of determining whether the user is allowed on the network and controlling network access values based on a defined security policy. Accounting is the process of generating log files that record session statistics used for billing, system diagnosis, and usage planning. Installation: Download freeradius source from http://freeradius.org/ tar -xzvf freeradius-server-3.0.3. tar.gz cd freeradius mkdir -p /opt/freeradius ./configure --with-mysql-lib-dir=/usr/lib64/mysql --prefix=/opt/freeradius make sudo make install sudo ldconfig Configuration: 1.Create softlink ...

System Information: IP Address of FreeRadius Server: 192.168.2.200 IP Address of FreeRAdius Client Server: 192.168.2.100 Install FreeRadius on Server: yum install freeradius2 freeradius2-utils freeradius2-ldap Download radius ldap schema file and copy to ldap schema directory # wget http://open.rhx.it/phamm/schema/radius.schema # cp radius.schema /etc/openldap/schema/ Include file in ldap configuration file /etc/openldap/ slapd.conf include /etc/openldap/schema/radius.schema Edit /etc/raddb/modules/ldap and add below entry   vi /etc/raddb/modules/ldap ldap { server = "ldap01. example.com " #identity = "cn=Manager,dc=example,dc=com" #password = password basedn = "dc=example,dc=com" filter = "(uid=%{%{Stripped-User-Name}:-%{User-Name}})" base_filter = "(objectclass=posixAccount)" start_tls = no dictionary_mapping = ${raddbdir}/ldap.attrmap ldap...

[root@cmlin02 openldap]# vi /etc/rsyslog.conf ... # LDAP local4.* /var/log/ldap.log ... [root@cmlin02 openldap]# /etc/init.d/rsyslog restart Shutting down system logger: [ OK ] Starting system logger: [ OK ] [root@cmlin02 openldap]# touch /var/log/ldap.log [root@cmlin02 openldap]# service slapd restart [root@cmlin02 log]# tail -100f /var/log/ldap.log ... Jul 25 10:43:24 cmlin02 slapd[10271]: conn=1019 op=196 SRCH attr=cn Jul 25 10:43:24 cmlin02 slapd[10271]: <= bdb_equality_candidates: (member) not indexed Jul 25 10:43:24 cmlin02 slapd[10271]: <= bdb_equality_candidates: (uniqueMember) not indexed Jul 25 10:43:24 cmlin02 slapd[10271]: conn=1019 op=196 SEARCH RESULT tag=10

When you config the Xendesktop, VMware view or other related to active Directory,you may need to know Base DN and Bind DN. Open the command prompt  on winodws2003 AD server and type”dsquery user” C:\>dsquery user “CN=Administrator,CN=Users,DC=wad,DC=com” “CN=Guest,CN=Users,DC=wad,DC=com” “CN=SUPPORT_388945a0,CN=Users,DC=wad,DC=com” “CN=krbtgt,CN=Users,DC=wad,DC=com” “CN=root,CN=Users,DC=wad,DC=com” “CN=IUSR_WICHEU-TOL55S55,CN=Users,DC=wad,DC=com” “CN=IWAM_WICHEU-TOL55S55,CN=Users,DC=wad,DC=com” “CN=vdi1,CN=Users,DC=wad,DC=com” Find special user, you can type”dsquery user -name xxx*” C:\>dsquery user -name vd* “CN=vdi1,CN=Users,DC=wad,DC=com” Also this command are query group too!