Radius

The only book on the market for this widely implemented but little understood protocol, RADIUS has a receptive audience among Internet service providers, as well as corporate IT managers who need increased security for people seeking network access from remote locations-especially with the rising use of handheld computers and other portable devices. The RADIUS protocol authenticates people attempting to access a central server via a dial-up or other remote connection. RADIUS provides a complete, detailed guide into the underpinnings of the RADIUS protocol, with particular emphasis on the utility of user accounting. Author Jonathan Hassell also provides practical suggestions for using an open-source variation called FreeRADIUS, giving the reader background in both RADIUS theory and practice.

Jonathan Hassell is a systems administrator, IT consultant, and industry author residing in Raleigh, NC. He has extensive experience in networking technologies and Internet connectivity and currently runs his own web hosting business, Enable Hosting. He is the author of "RADIUS" for O'Reilly and Associates and is a columnist for WindowsITSecurity.COM and Pinnacle's Linux AppDev newsletter. He has also worked with IBM to develop a tutorial on Apache web server optimization.

Preface

ix

An Overview of RADIUS

1

(17)

An Overview of AAA

1

(3)

Key Points About AAA Architecture

4

(2)

The Authorization Framework

6

(9)

And Now, RADIUS

15

(3)

RADIUS Specifics

18

(18)

Using UDP versus TCP

18

(1)

Packet Formats

19

(2)

Packet Types

21

(3)

Shared Secrets

24

(1)

Attributes and Values

25

(6)

Authentication Methods

31

(2)

Realms

33

(1)

RADIUS Hints

34

(2)

Standard RADIUS Attributes

36

(27)

Attribute Properties

36

(27)

RADIUS Accounting

63

(14)

Key Points in RADIUS Accounting

63

(1)

Basic Operation

64

(1)

The Accounting Packet Format

65

(2)

Accounting Packet Types

67

(2)

Accounting-specific Attributes

69

(8)

Getting Started with FreeRADIUS

77

(22)

Introduction to FreeRADIUS

77

(1)

Installing FreeRADIUS

78

(11)

In-depth Configuration

89

(7)

Troubleshooting Common Problems

96

(3)

Advanced FreeRADIUS

99

(19)

Using PAM

99

(2)

Proxying and Realms

101

(1)

Using the clients.conf File

102

(1)

FreeRADIUS with Some NAS Gear

103

(3)

Using MySQL with FreeRADIUS

106

(6)

Simultaneous Use

112

(4)

Monitoring FreeRADIUS

116

(2)

Other RADIUS Applications

118

(13)

RADIUS for Web Authentication

118

(5)

Using the LDAP Directory Service

123

(4)

Parsing RADIUS Accounting Files

127

(4)

The Security of RADIUS

131

(8)

Vulnerabilities

131

(4)

The Extensible Authentication Protocol

135

(1)

Compensating for the Deficiencies

136

(1)

Modifying the RADIUS Protocol

137

(2)

New RADIUS Developments

139

(20)

Interim Accounting Updates

139

(1)

The Apple Remote Access Protocol

140

(2)

The Extensible Authentication Protocol

142

(2)

Tunneling Protocols

144

(2)

New Extensions Attributes

146

(13)

Deployment Techniques

159

(18)

Typical Services

159

(3)

RADIUS and Availability

162

(13)

Other Things RADIUS

175

(2)

Appendix: Attribute Reference

177

(4)

Index

181

What is included with this book?

The New copy of this book will include any supplemental materials advertised. Please check the title of the book to determine if it should include any access cards, study guides, lab manuals, CDs, etc.

The Used, Rental and eBook copies of this book are not guaranteed to include any supplemental materials. Typically, only the book itself is included. This is true even if the title states it includes any access cards, study guides, lab manuals, CDs, etc.

FREE SHIPPING

Amazon no longer offers textbook rentals. We do!

Summary

Author Biography

Table of Contents

Supplemental Materials