Centos6.0之pptpd+mysql+freeradius实现***帐号统一认证管理
本文系统Centos6.0；192.168.182.133本文也是近期项目之一；为了后面的***隧道和多ip路由分流；-rw-r--r-- 1 root root 6843426月 19 22:49 ppp-2.4.5.tar.gz-rw-r--r-- 1 root root740486月 19 22:49 pptpd-1.3.4-2.el6.i686.rpm这是其中的两个包；如果pptpd不好下载的话，欢迎到本人下载区去下载，因为这个国外的url被和谐了，本人也是使用了加速器才下载到的；http://down.51cto.com/data/840850
1、下面就开始操作了；# vim /etc/pptpd.confpptpd.conf
option /etc/ppp/options.pptpd
logwtmp
localip 192.168.182.133
remoteip 172.16.0.2-254# vim /etc/ppp/options.pptpd
name pptpd
refuse-pap
refuse-chap
refuse-mschap
require-mschap-v2
require-mppe-128
proxyarp
lock
nobsdcomp
novj
novjccomp
nologfd
ms-dns 8.8.8.8
logfile /var/log/pptpd.log# vim /etc/ppp/chap-secretsSecrets for authentication using CHAPclient serversecret IP addresses
test pptpd test123 # cat /etc/sysctl.conf |grep -v ^# |grep -v ^#
net.ipv4.ip_forward = 1# iptables -t nat -A POSTROUTING -s 172.16.0.0/24 -j MASQUERADEPs；重启服务；测试本地拨号是否正常；经过测试，拨号OK；2、下面是安装mysql及freeradius;yum install mysql freeradius* -y创建radius数据库，导入相关sql；并创建测试用户；mysql> create database radius;# mysql -u root -pradius < /etc/raddb/sql/mysql/admin.sql
# mysql -u root -p radius < /etc/raddb/sql/mysql/cui.sql
# mysql -u root -p radius < /etc/raddb/sql/mysql/nas.sql
# mysql -u root -p radius < /etc/raddb/sql/mysql/schema.sql
# mysql -u root -p radius < /etc/raddb/sql/mysql/wimax.sqlmysql> insert into radius.radcheck (Username,Attribute,op,Value) values('lansgg','password','==','lansgg123')配置radius的相关配置文件；# vim /etc/raddb/radiusd.conf
700 $INCLUDE sql.conf# vim /etc/raddb/sql.conf
28 database = "mysql"
33 driver = "rlm_sql_${database}"
36 server = "localhost"
38 login = "root"
39 password = "123"
42 radius_db = "radius"
50 acct_table1 = "radacct"
51 acct_table2 = "radacct"
100 readclients = yes
ps:前面的子标为行数哈# vim /etc/raddb/sites-enabled/default
69 authorize {
170 # files
177 sql
252 authenticate {
297 # unix
333 preacct {
372 # files
389 # unix
406 sql
449 session {
454 sql
461 post-auth {
475 sql# vim /etc/raddb/sites-enabled/inner-tunnel
124 # files
131 sql
223 # unix
255 sql
277 sql# vim /etc/raddb/eap.conf
30 default_eap_type = peap测试radius和mysql的整合3、下面是pptpd和freeradius的整合了；解压ppp源码包，copy其配置文件；# tar zxvf ppp-2.4.5.tar.gz# mkdir /etc/ppp/radius
# cp -Rppp-2.4.5/pppd/plugins/radius/etc/ /etc/ppp/radius/修改radius的相关路径：# vim radiusclient.conf
auth_order radius
login_tries 4
login_timeout 60
nologin /etc/nologin
issue /etc/ppp//radius/etc/issue
authserver localhost:1812
acctserver localhost:1813
servers /etc/ppp/radius/etc/servers
dictionary /etc/ppp/radius/etc/dictionary
login_radius /usr/local/sbin/login.radius
seqfile /var/run/radius.seq
mapfile /etc/ppp/radius/etc/port-id-map
default_realm
radius_timeout10
radius_retries3
login_local /bin/login# vim /etc/ppp/radius/etc/dictionary
INCLUDE /etc/ppp/radius/etc/dictionary.microsoft
INCLUDE /etc/ppp/radius/etc/dictionary.ascend#新增
INCLUDE /etc/ppp/radius/etc/dictionary.merit #新增
INCLUDE /etc/ppp/radius/etc/dictionary.compat#新增增加options.pptpd# vim /etc/ppp/options.pptpd
plugin /usr/lib/pppd/2.4.5/radius.so#新增
radius-config-file /etc/ppp/radius/etc/radiusclient.conf#新增修改radius认证密钥；# vim /etc/raddb/clients.conf
101 secret = lansggtest# vim /etc/ppp/radius/etc/servers
5 localhost lansggtest经过测试OK！（帐号:lansgg；密码lansgg123）
页:
[1]