DokuWiki

You've loaded an old revision of the document! If you save it, you will create a new version with this data.

====== authradius Plugin ======

---- plugin ----
description: Authentication using radius servers
author     : Todd Switzer
email      : toddswitzer@gmail.com 
type       : auth
lastupdate : 2013-12-11
compatible : Weatherwax, 2013-05-10
depends    : 
conflicts  : 
similar    : 
tags       : authentication, radius

downloadurl: http://toddswitzer.ca/authradius/authradius-plugin.zip
bugtracker : 
sourcerepo : 
donationurl:

screenshot_img : 
----

===== Installation =====

:!: **External requirements:** This plugin requires the following additional components that must be installed separately: 
  * The [[http://pecl.php.net/package/radius|pecl/radius php package]] must be installed and the extension needs to be enabled.

Install the plugin using the [[plugin:plugin|Plugin Manager]] and the download URL above, which points to latest version of the plugin. Refer to [[:Plugins]] on how to install plugins manually.

===== Configuration and Settings =====

Authentication is performed against a list of radius servers. A group can be provided to the user by setting the ''Class'' attribute in the radius authentication response.

The following options need to be set in the //Configuration Manager//:
  * **host** : A comma separated list of IPs or hostnames of radius servers.
  * **port** : The port to use for radius. Must be the same for all servers.
  * **timeout** : The radius timeout.
  * **tries** : The number of tries for radius to authenticate.
  * **secret** : The shared secret for the radius servers. Must be the same for all servers.
  * **mailhost** : The host to append to email addresses. User email addresses will be set to ''<username>''@''<mailhost>''.
  * **defaultgroup** : The group to give to the user if none is provided by the ''Class'' radius attribute.
  * **auth type** : Change the type of RADIUS Authentication.  Currently supported are PAP, MSCHAPV2.  Default is PAP.

Then to switch to the radius authentication set the ''Authentication backend'' to ''authradius''.

If you find yourself locked out edit the ''conf/local.php'' and change the ''authtype'' back to ''authplain''.

=== Change Log ===

* **2013-05-27**
    * Initial release
  * **2013-05-28**
    * Added English configuration settings explanations.
  * **2013-12-11**
    * Added support for MSCHAPv2. Changes contributed by Benjamin J. Higgins.
  * **2015-10-13**
    * Added support for multiple groups. Add the list of groups for the user to the ''Class'' parameter of the RADIUS response separated by '';'' or '',''. Changes contributed by Patrick F. Marques.

=== Notes ===

* Based on this code: https://www.dokuwiki.org/auth:radius

Please fill all the letters into the box to prove you're human. M S E H U Please keep this field empty:

Edit summary

Note: By editing this page you agree to license your content under the following license: CC Attribution-Share Alike 4.0 International