pppd-radius (8)

Leading comments

manual page [] for RADIUS plugin for pppd 2.4
$Id: pppd-radius.8,v 1.5 2004/03/26 13:27:17 kad Exp $
SH section heading
SS subsection heading
LP paragraph
IP indented paragraph
TP hanging label

(The comments found at the beginning of the groff file "man8/pppd-radius.8".)

NAME

radius.so - RADIUS authentication plugin for pppd(8)

SYNOPSIS

pppd [ options ] plugin radius.so

DESCRIPTION

The RADIUS plugin for pppd permits pppd to perform PAP, CHAP, MS-CHAP and MS-CHAPv2 authentication against a RADIUS server instead of the usual /etc/ppp/pap-secrets and /etc/ppp/chap-secrets files.

The RADIUS plugin is built on a library called radiusclient which has its own configuration files (usually in /etc/radiusclient), consult those files for more information on configuring the RADIUS plugin

OPTIONS

The RADIUS plugin introduces one additional pppd option:

radius-config-file filename

The file filename is taken as the radiusclient configuration file. If this option is not used, then the plugin uses /etc/radiusclient/radiusclient.conf as the configuration file.

avpair attribute=value

Adds an Attribute-Value pair to be passed on to the RADIUS server on each request.

map-to-ifname

Sets Radius NAS-Port attribute to number equal to interface name (Default)

map-to-ttyname

Sets Radius NAS-Port attribute value via libradiusclient library

USAGE

To use the plugin, simply supply the plugin radius.so option to pppd, and edit /etc/radiusclient/radiusclient.conf appropriately. If you use the RADIUS plugin, the normal pppd authentication schemes (login, checking the /etc/ppp/*-secrets files) are skipped. The RADIUS server should assign an IP address to the peer using the RADIUS Framed-IP-Address attribute.

SEE ALSO

pppd(8) pppd-radattr(8)

AUTHOR

David F. Skoll <dfs@roaringpenguin.com>