KT Poh <[EMAIL PROTECTED]> wrote: > My project requirements as far as integration > with the carrier's RADIUS system is concerned are as > follows: > > 1. to retrieve mobile users' MSISDNs (Mobile Station > ISDN) or assigned client IP addresses from the > incoming HTTP requests received by the web portal, and > to validate it against the carrier's AAA system. The > web portal will grant user access based on the result > of the validation.
For Apache, mod_auth_radius can do some of this. You may have to edit the source to add features for your local system. > 2. In cases where client IP addresses are received, > to also get the users' corresponding MSISDNs from the > carrier's AAA system. If the MSISDN is defined in a RADIUS attribute, that's possible. > 3. Upon successful validation, to also fetch the > required user profiles (name, email, etc if available) > from the carrier's AAA system so that the user info > can be made available for the web portal's use. For that, you'll probably need to create a local vendor dictionary, and write a RADIUS client to integrate into your web portal, which understands these attributes. > As I am very new to RADIUS and not to mention the > mobile carrier's RADIUS system, which I gathered from > pieces of information - it could be a specialized > RADIUS system for wireless industry, I am not sure how > viable is my above approach. It's possible, it's just a lot of work. Personally, I would use RADIUS just for authentication, and have the users information in an SQL database. The web portal can then query the database for the user information ONLY if the RADIUS server says that the user was authenticated. The reason for this design is that it looks like you're trying to use the RADIUS server for both authentication & some database information. That's going to cause difficulties. > - Is there a document/case study that describes how > mobile carriers typically make use of RADIUS for > authenticating their mobile users? I doubt it. That kind of information is usually kept secret. > - Is there a comprehensive and stable open-source Java > APIs for RADIUS integration? Look on google. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
