The directory /usr/local/share/freeradius is where the dictionary files are stored. This is where RADIUS attributes can be defined. Assuming the vendor does not have established dictionary file in the FreeRADIUS distribution, you begin the process by creating a file called: dictionary.<vendor>.
The contents of the dictionary.<vendor> file define a vendor identifier (which ought to be the Structure of Management Information (SMI) Network Management Private Enterprise Code of the Vendor), and the definitions for any vendor specific attributes.
In the following example, the Vendor Enterprise Number for HP is 17613 and the Enterprise Local User Name Attribute is 1. These numbers specify that a given user is an admin or monitor user in the RADIUS server (instead of using the HP EFS WAN Accelerators default for users not named admin and monitor).
These instruction assume you are running FreeRADIUS, v.1.0, which is available from
http://www.freeradius.org.
To install FreeRADIUS 1. Download FreeRadius from http://www.freeradius.org. on a Linux computer
2.At your system prompt, enter the following set of commands:
>tar xvzf
>make
>make install #as root
To add acceptance | 1. | In a text editor, open the /usr/local/etc/raddb/clients.conf file. |
requests on the | 2. | To create the key for the RADIUS server, add the following text to the clients.conf |
RADIUS server | ||
|
| file: |
client 10.0.0.0/16 { secret = testradius shortname =
}
The secret you specify here must also be specified in the HP EFS WAN Accelerator when you set up RADIUS server support. For detailed information, see the HP Enterprise File Services WAN Accelerator Management Console User Guide.
3.In a text editor, create a /usr/local/share/freeradius/dictionary.rbt file for HP.
4.Add the following text to the dictionary.rbt file.
VENDOR | RBT |
| 17163 |
|
ATTRIBUTE | 1 | string | RBT |
5. Add the following line to the /usr/local/share/freeradius/dictionary:
$INCLUDE dictionary.rbt
6.Add users to the Radius server by editing the /usr/local/etc/raddb/users file. For example:
"admin" | ||
|
|
|
HP STORAGEWORKS ENTERPRISE FILE SERVICES WAN ACCELERATOR 2.1.5 DEPLOYMENT GUIDE | 99 | |
9 - RADIUS AND TACACS+
AUTHENTICATION