Send kea-dev mailing list submissions to
        [email protected]

To subscribe or unsubscribe via the World Wide Web, visit
        https://lists.isc.org/mailman/listinfo/kea-dev
or, via email, send a message with subject or body 'help' to
        [email protected]

You can reach the person managing the list at
        [email protected]

When replying, please edit your Subject line so it is more specific
than "Re: Contents of kea-dev digest..."


Today's Topics:

   1.  Initial feedback on the new Radius integration (Baptiste Jonglez)


----------------------------------------------------------------------

Message: 1
Date: Sun, 20 May 2018 23:37:30 +0200
From: Baptiste Jonglez <[email protected]>
To: [email protected]
Subject: [kea-dev] Initial feedback on the new Radius integration
Message-ID: <[email protected]>
Content-Type: text/plain; charset="us-ascii"

Hi,

As you probably know, I have been developing Radius integration in Kea for
a non-profit ISP / community network I am a member of.  Here is the
work-in-progress code: https://code.ffdn.org/zorun/kea

I saw that there is a new Radius feature in Kea 1.4 (unfortunately not
publicly available).  Based on its documentation [1], I have a couple of
questions:

- do you support the Framed-IP-Netmask radius attribute?  Our use-case
  involves giving /32 IP addresses to clients, regardless of the actual
  prefix length in Kea's configuration.  So we basically use
  Framed-IP-Netmask = 255.255.255.255, would it be interpreted by Kea?

- is there a reason for using the original freeradius client library
  (which is unmaintained to the point that you had to patch it locally),
  while radcli [2] is actively maintained and has the same API?  We tried
  to discuss this some time ago [3].

- your radius implementation is advertised as a hook, but I see that a
  full rebuild of Kea is needed.  It seems that part of the implementation
  is built into Kea?  We initially tried to implement radius support as a
  hook, but it was really awkward, so we implemented it within Kea.

- the host reservation cache looks very nice!  This is something we really
  wanted to implement but it looked quite complex to do.

Thanks in advance,
Baptiste

[1] http://kea.isc.org/docs/kea-guide.html#hooks-radius
[2] https://github.com/radcli/radcli
[3] https://kea.isc.org/ticket/5349#comment:1
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: 
<https://lists.isc.org/pipermail/kea-dev/attachments/20180520/afa5796d/attachment-0001.bin>

------------------------------

Subject: Digest Footer

_______________________________________________
kea-dev mailing list
[email protected]
https://lists.isc.org/mailman/listinfo/kea-dev


------------------------------

End of kea-dev Digest, Vol 50, Issue 3
**************************************

Reply via email to