[
https://issues.apache.org/jira/browse/GUACAMOLE-197?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15963267#comment-15963267
]
Nick Couchman commented on GUACAMOLE-197:
-----------------------------------------
{quote}
It is possible to use this now? I just installed 0.9.12, and I have a RADIUS
server that I'd like to try using guac against. I'm a newb though, and don't
know how to install this. I have guac 0.9.12 running on Ubuntu.
{quote}
You're certainly welcome to check out the source code from my fork of the repo
and try it out:
https://github.com/necouchman/incubator-guacamole-client/tree/GUACAMOLE-197
There are some things to know about it:
-You have to build it yourself, there are no pre-compiled WARs/JARs for it,
and, actually, for this extension, probably never will be (due to some
licensing issues). Building is pretty easy - you need a Java compiler (Oracle
JDK, for example) and Maven, and then you just do "mvn package" - instructions
are in the main readme file.
- This particular branch of the incubator-guacamole-client tree lags behind the
Apache master by several commits (51), so there are probably some fixes and
functionality changes that you'd be missing.
- There's currently a bug that I need to fix for the build process to exclude
some JAR signatures. You currently have to work around it by removing two
files from the resulting JAR file: META-INF/BCKEY.SF and META-INF/BCKEY.DSA.
Also, since it hasn't been merged into the main code, yet, the documentation
also hasn't been updated. The config parameters are as follows:
radius-server
radius-auth-port
radius-acct-port
radius-shared-secret
radius-auth-protocol
radius-key-file
radius-key-type
radius-ca-file
radius-ca-type
radius-eap-ttls-inner-protocol
Feel free to let me know if you encounter any bugs.
> Implement Support for RADIUS Authentication
> -------------------------------------------
>
> Key: GUACAMOLE-197
> URL: https://issues.apache.org/jira/browse/GUACAMOLE-197
> Project: Guacamole
> Issue Type: Improvement
> Components: guacamole, guacamole-client
> Reporter: Nick Couchman
> Priority: Minor
> Fix For: 0.9.13-incubating
>
>
> Working on implementing a RADIUS authentication module -
> guacamole-auth-radius. The basic implementation is completed - with a basic
> PAP or CHAP RADIUS server, the authentication succeeds and the user is logged
> in.
> I'm running into an issue, though, trying to implement Challenge/Response in
> RADIUS. I have my RADIUS server configured to talk to LinOTP for MFA/2FA,
> and RADIUS sends the AccessChallenge package back, asking for the second
> factor. My issue is in my continual failure to grasp the connection between
> the servlet side and the AngularJS web application. I've copied the Duo
> authentication code and tried to morph it into something that will present
> another box for the RADIUS challenge, but I can't get my controller function
> to actually fire.
> Once that is working, I'd like to support other RADIUS authentication
> protocols, like EAP-TLS and EAP-TTLS, so there's a little more work to be
> done, but right now I'm focusing on the basic protocols and the
> challenge/response.
> Will have a repo posted here in a moment for working on this.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
