RE: alan's book, or anything new on the horizon

2008-01-16 Thread Santiago Balaguer García

I have been following you since three years and
I trust you, so I will buy your book. Date: Tue, 15 Jan 2008 17:03:52 +0100 
From: [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Subject: 
Re: alan's book, or anything new on the horizon  Duane Cox wrote:  I wonder 
if Alan ever released that book that he had talked about in 2006?  Or did it 
become a collection of wiki pages?  I'm up to 180 pages. There's more content 
than the O'Reilly book, by a long shot.  However, I moved countries in 2007, 
and various factors meant I couldn't spend much time on the book. I've 
recently been doing 10 pages a week, so I hope to finish it eventually.  Now 
that 2.0 is out, I'm hoping to feel less guilty about that, and more guilty 
about the book.   Is anyone working on a second revision to Hassell's 
O'Reilly RADIUS?  O'Reilly won't be issuing one. The books sales were high 
for the first few weeks, and dropped off quickly after that. Everyone figured 
out that it's pretty much content-free. i.e. one well known O'Reilly author 
described it to me as The worse book that O'Reilly has published.  I've 
talked with them, too. They're not interested in a second edition, and they're 
not interested in a FreeRADIUS book. Any other publisher I've talked to 
projects small amounts of money in sales, so they're not interested either.  
So... I'm going to self-publish. I think there's enough money to make it worth 
my time.  Alan DeKok. - List info/subscribe/unsubscribe? See 
http://www.freeradius.org/list/users.html
_
Tecnología, moda, motor, viajes,…suscríbete a nuestros boletines para estar 
siempre a la última
Guapos y guapas, clips musicales y estrenos de cine. -
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: alan's book, or anything new on the horizon

2008-01-16 Thread orion
then dont keep it under 400.
more info is better. ( and real examples too )
thanx.

On 16/01/2008, Alan DeKok [EMAIL PROTECTED] wrote:

 orion wrote:
  alan , can we have the TOC of the book ?

   It's still in development, and I'm re-arranging it occasionally.  At a
 high level:

 Introduction

 Concepts
   Participants and their roles
 User Devices
 NAS
 RADIUS Servers
 Databases
 AAA Overview
 Authentication
 Authorization
 Accounting
 Auditing
 Conversations
 Protocol overview
 Message contents
 Dictionaries
 Security

 Participants in more detail
   User devices
   NAS
   RADIUS Servers
   Databases

 Authentication
   The basics
 PAP
 CHAP
 MS-CHAP
 Digest
   Managing passwords
 hashes  protocol compatibility
   EAP
 EAP-GTC
 EAP-MD5
 EAP-MSCHAPv2
 LEAP
 EAP and password storage
   EAP-TLS Methods
 EAP-TLS
 Microsoft Windows requirements
 PEAP
 EAP-TTLS
   Wireless and wired security with EAP
   Other authentication protocols

 Authorizations
   Principles for policy creating
 Logging
 Role-based authorization
 Policy maintenance
 Chained policies
   Examples

 Accounting
   Interaction with authorization
   Generation of data
   Logging of data
   Relaying of packets
   Simultaneous-Use

 RADIUS Server implementations
   ACS
   OAS
   Juniper
   OCS Radiator
   FreeRADIUS
   Others
   Recommendations

 -  And now we get into FreeRADIUS-specific text. :)

 Basic deployments
   Installing FreeRADIUS
   Configuration files
 radiusd.conf
 clients.conf
 proxy.conf
 virtual servers
   Starting the server
 Debugging
   Tracking configuration changes
   Test methodology

 radiusd.conf
   Layout
   Processing of requests
 authentication
 accounting
 proxying
   Modules
 Multiple instances of a module
 Redundant and load-balanced modules
 simple flow control

 unlang
   Introduction
   Interaction with modules
   Examples

 clients.conf

 proxy.conf

 virtual servers

 users file
   format
   sample entries

 Dictionaries
   ATTRIBUTE definitions
   VALUE definitions
   VENDOR definitions
   Loading other dictionary files
   Creating a dictionary file
 Special considerations

 Debugging a deployment
Tools
Test methods and procedures
EAP testing with eapol_test

 Databases
LDAP
  Active Directory considerations
   SQL
 MySQL
 Postgresql

 Common deployment issues
Windows
AP implementations
RADIUS Servers
LDAP Servers

 Security
   Network security
   Physical security
   Configuration security
   Methods for policy creation

 RADIUS protocol reference
   Attributes
 Data types
 VSA's
   Packet types

 Module overview
   rlm_chap
   rlm_digest
   ...


   If you've read this far, I'm impressed.  With each topic on a single
 line like that, it starts to look silly after a while.

   The intent, though, is to be the *definitive* reference for not only
 FreeRADIUS, but also for the protocol, and common use cases.  Where
 other books say things like Access-Request packets contain requests for
 access, this one says that, and more.  Like common problems people see,
 common mistakes vendors make, common misunderstandings and how to
 correct them, and how to work around various issues in practice.

   I'm going to try to keep it under 400 pages, but I do think there's
 enough material to make 400 pages.

   Alan DeKok.
 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: alan's book, or anything new on the horizon

2008-01-16 Thread Alan DeKok
orion wrote:
 then dont keep it under 400.
 more info is better. ( and real examples too )

  It's a lot of typing, and a lot of copy-editing.

  The main issue with examples is that adding NAS examples is almost
impossible.  There are dozens of manufacturers, and hundreds of possible
configurations.

  Adding *FreeRADIUS* examples is easy.  But knowing *which* examples
are useful to a reader is hard.  The best approach I've seen that works
is to cover the concepts, and to document the oddities and things that
confuse most people.  Add a few simple examples to that, and the book is
quickly up to 400 pages.

  i.e. no complex examples, but the tools to figure it out on your own.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: alan's book, or anything new on the horizon

2008-01-16 Thread Spam Eater
Hi Alan,

I am curious about your book.
When will it be available? Will it be sold at Amazon or other online store?

Thanks!

On Jan 16, 2008 9:23 PM, Alan DeKok [EMAIL PROTECTED] wrote:

 orion wrote:
  then dont keep it under 400.
  more info is better. ( and real examples too )

  It's a lot of typing, and a lot of copy-editing.

  The main issue with examples is that adding NAS examples is almost
 impossible.  There are dozens of manufacturers, and hundreds of possible
 configurations.

  Adding *FreeRADIUS* examples is easy.  But knowing *which* examples
 are useful to a reader is hard.  The best approach I've seen that works
 is to cover the concepts, and to document the oddities and things that
 confuse most people.  Add a few simple examples to that, and the book is
 quickly up to 400 pages.

  i.e. no complex examples, but the tools to figure it out on your own.

  Alan DeKok.
 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: alan's book, or anything new on the horizon

2008-01-16 Thread Alan DeKok
orion wrote:
 alan , can we have the TOC of the book ?

  It's still in development, and I'm re-arranging it occasionally.  At a
high level:

Introduction

Concepts
  Participants and their roles
User Devices
NAS
RADIUS Servers
Databases
 AAA Overview
Authentication
Authorization
Accounting
Auditing
 Conversations
Protocol overview
Message contents
 Dictionaries
 Security

Participants in more detail
  User devices
  NAS
  RADIUS Servers
  Databases

Authentication
  The basics
PAP
CHAP
MS-CHAP
Digest
  Managing passwords
hashes  protocol compatibility
  EAP
EAP-GTC
EAP-MD5
EAP-MSCHAPv2
LEAP
EAP and password storage
  EAP-TLS Methods
EAP-TLS
Microsoft Windows requirements
PEAP
EAP-TTLS
  Wireless and wired security with EAP
  Other authentication protocols

Authorizations
  Principles for policy creating
Logging
Role-based authorization
Policy maintenance
Chained policies
  Examples

Accounting
  Interaction with authorization
  Generation of data
  Logging of data
  Relaying of packets
  Simultaneous-Use

RADIUS Server implementations
  ACS
  OAS
  Juniper
  OCS Radiator
  FreeRADIUS
  Others
  Recommendations

-  And now we get into FreeRADIUS-specific text. :)

Basic deployments
  Installing FreeRADIUS
  Configuration files
radiusd.conf
clients.conf
proxy.conf
virtual servers
  Starting the server
Debugging
  Tracking configuration changes
  Test methodology

radiusd.conf
  Layout
  Processing of requests
authentication
accounting
proxying
  Modules
Multiple instances of a module
Redundant and load-balanced modules
simple flow control

unlang
  Introduction
  Interaction with modules
  Examples

clients.conf

proxy.conf

virtual servers

users file
  format
  sample entries

Dictionaries
  ATTRIBUTE definitions
  VALUE definitions
  VENDOR definitions
  Loading other dictionary files
  Creating a dictionary file
Special considerations

Debugging a deployment
   Tools
   Test methods and procedures
   EAP testing with eapol_test

Databases
   LDAP
 Active Directory considerations
  SQL
MySQL
Postgresql

Common deployment issues
   Windows
   AP implementations
   RADIUS Servers
   LDAP Servers

Security
  Network security
  Physical security
  Configuration security
  Methods for policy creation

RADIUS protocol reference
  Attributes
Data types
VSA's
  Packet types

Module overview
  rlm_chap
  rlm_digest
  ...


  If you've read this far, I'm impressed.  With each topic on a single
line like that, it starts to look silly after a while.

  The intent, though, is to be the *definitive* reference for not only
FreeRADIUS, but also for the protocol, and common use cases.  Where
other books say things like Access-Request packets contain requests for
access, this one says that, and more.  Like common problems people see,
common mistakes vendors make, common misunderstandings and how to
correct them, and how to work around various issues in practice.

  I'm going to try to keep it under 400 pages, but I do think there's
enough material to make 400 pages.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


alan's book, or anything new on the horizon

2008-01-15 Thread Duane Cox
Hello

I wonder if Alan ever released that book that he had talked about in 2006?
Or did it become a collection of wiki pages?

Is anyone working on a second revision to Hassell's O'Reilly RADIUS?

Duane Cox

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: alan's book, or anything new on the horizon

2008-01-15 Thread Alan DeKok
Duane Cox wrote:
 I wonder if Alan ever released that book that he had talked about in 2006?
 Or did it become a collection of wiki pages?

  I'm up to 180 pages.  There's more content than the O'Reilly book, by
a long shot.

  However, I moved countries in 2007, and various factors meant I
couldn't spend much time on the book.  I've recently been doing 10 pages
a week, so I hope to finish it eventually.

  Now that 2.0 is out, I'm hoping to feel less guilty about that, and
more guilty about the book.

 Is anyone working on a second revision to Hassell's O'Reilly RADIUS?

  O'Reilly won't be issuing one.  The books sales were high for the
first few weeks, and dropped off quickly after that.  Everyone figured
out that it's pretty much content-free.  i.e. one well known O'Reilly
author described it to me as The worse book that O'Reilly has published.

  I've talked with them, too.  They're not interested in a second
edition, and they're not interested in a FreeRADIUS book.  Any other
publisher I've talked to projects small amounts of money in sales, so
they're not interested either.

  So... I'm going to self-publish.  I think there's enough money to make
it worth my time.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html