Free radius software for linux

RADIUS::UserFile is a Perl extension for manipulating a RADIUS users file.

SYNOPSIS

use RADIUS::UserFile;

my $users = new RADIUS::UserFile
File => /etc/raddb/users,
Check_Items => [ qw(Password Calling-Station-Id) ];

$users->load(/usr/local/etc/radius/users);

$users->add(Who => joeuser,
Attributes => { key1 => val1, key2 => val2 },
Comment => Created on . scalar localtime);

$users->update(File => /etc/raddb/users,
Who => qw(joeuser janeuser));

print $users->format(joeuser);

RADIUS::Packet is an object-oriented Perl interface to RADIUS packets.

SYNOPSIS

use RADIUS::Packet;
use RADIUS::Dictionary;

my $d = new RADIUS::Dictionary "/etc/radius/dictionary";

my $p = new RADIUS::Packet $d, $data;
$p->dump;

if ($p->attr(User-Name eq "lwall") {
my $resp = new RADIUS::Packet $d;
$resp->set_code(Access-Accept);
$resp->set_identifier($p->identifier);
$resp->set_authenticator($p->authenticator);
$resp->set_attr(Reply-Message) = "Welcome, Larry!rn";
my $respdat = auth_resp($resp->pack, "mysecret");
...

RADIUS (RFC2138) specifies a binary packet format which contains various values and attributes. RADIUS::Packet provides an interface to turn RADIUS packets into Perl data structures and vice-versa.

RADIUS::Packet does not provide functions for obtaining RADIUS packets from the network. A simple network RADIUS server is provided as an example at the end of this document. Also, a RADIUS::Server module is under development which will simplify the interface.

RADIUS::Dictionary is a RADIUS dictionary parser.

SYNOPSIS

use RADIUS::Dictionary;

my $dict = new RADIUS::Dictionary "/etc/radius/dictionary";
$dict->readdict("/some/other/file");
my $num = $dict->attr_num(User-Name);
my $name = $dict->attr_name(1);

This is a simple module that reads a RADIUS dictionary file and parses it, allowing conversion between dictionary names and numbers.

METHODS

new

Returns a new instance of a RADIUS::Dictionary object. If given an (optional) filename, it calls readdict for you.

->readdict

Parses a dictionary file and learns the namenumber mappings.

->attr_num($attrname)

Returns the number of the named attribute.

->attr_type($attrname)

Returns the type (string, integer, ipaddr, or time) of the named attribute.

->attr_name($attrnum)

Returns the name of the attribute with the given number.

->attr_numtype($attrnum)

Returns the type of the attribute with the given number.

->attr_has_val($attrnum)

Returns a true or false value, depending on whether or not the numbered attribute has any known value constants.

->val_has_name($attrnum)

Alternate (bad) name for attr_has_val.

->val_num($attrnum, $valname)

Returns the number of the named value for the attribute number supplied.

->val_name

Returns the name of the numbered value for the attribute number supplied.

Radical is a simple Radius packet decoder to assist in the debugging of Radius sessions.
It accepts the output of the Solaris snoop(1M) command and it is written in Python. language.

OpenGeDB Perl module is a module to access the OpenGeoDB database and calculate all ZIP codes in a certain radius.

Portslave is a RADIUS client used to create dialup access servers.

Portslave project uses the RADIUS protocol to authenticate from a remote RADIUS server which contains the actual user account information.

It primarily is for PPP access, but also works with other protocols and services.

Installation:

./configure --enable-shadow --with-pppdradius=/usr/sbin/pppd
make
make install

mod_auth_xradius is an Apache module that provides high performance authentication against RFC 2865 RADIUS Servers.
Main features:
- Supports popular RADIUS Servers including OpenRADIUS, FreeRADIUS and commercial servers.
- Distributed Authentication Cache using apr_memcache.
- Local Authentication Cache using DBM.
- Uses standard HTTP Basic Authentication, unlike mod_auth_radius which uses cookies for sessions.

uRadiusLib is a full, small, and easy to use C RADIUS client library. It includes full AAA example code with complete attribute sets.

It provides AAA via a very easy C API for your applications. uRadiusLib is based on the Cistron and Livingstone radiusd code.

It was originally designed to be used in embedded Linux applications with uClibC/Buildroot or similar, but can be used anywhere.

Installation:

cd liburadius
make
make install

cd examples
#setup hardcoded for your radius server
#See PLAN for API
vi testauth.c
make testauth
./testauth

#setup hardcoded for your radius server
#See PLAN for API
vi testacct.c
make testacct
./testacct