I'm hopinh there's someone who can give me some hints about our radius plan.
I work for an ISP, and we've been using to radius to authenticate dial-up
users out of an openstep system running NetInfo. This is a system I've
inherited, and I don't have any previous radius knowledge. I can maintain
the system, but making significant changes is outside my capabilities.
We're now in a situation where we have to implement CHAP authentication out
of our radius system. We can't really include a clear-text password in our
raddb/users file, as that would involve making literally hundreds of
entries by hand in the file. We've been planning on going to a SQL
back-end for user authentication. We would be using PostgreSQL for the
authentication backend.
So here are my questions:
1. Is there a way to make radius do CHAP authentication without having the
clear text password in the raddb/users file? can we have that looked up
out of netinfo?
2. Will a SQL (specifically a PostgreSQL) authentication scheme allow us
to do what we're trying to do?
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html