Re: mpd and radius

2006-01-26 Thread Mohacsi Janos




On Wed, 25 Jan 2006, gahn wrote:


Hi all:

I ahve some basic questions regarding the mpd.conf:

set radius retries 3
set radius timeout 3
set radius server 192.168.128.101 testing123 1812 1813
set radius me 1.1.1.1
set bundle enable radius-auth radius-fallback

Here my radius server is 192.168.128.101 and interanl
interface of this mpd server is 192.168.64.65

1) What is this testing123? is that key between
radius server and the nas (the pptp box)?



Yes. This is a shared secret between your radius server and nas boxes. 
Any clients which is accessing radius server should use their respective 
shared secret. If you are using freeradius you should configure it in 
clients.conf  and your nas box. You should also select a reasonably 
complex shared secret to prevent brute force guessing attack against your 
radius server.




set radius me 1.1.1.1
#send the given IP in the RAD_NAS_IP_ADDRESS attribute
to the server.


This one is the IP address configured for this NAS/client...

Regards,
Janos Mohacsi
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


mpd and radius

2006-01-25 Thread gahn
Hi all:

I ahve some basic questions regarding the mpd.conf:

set radius retries 3
set radius timeout 3
set radius server 192.168.128.101 testing123 1812 1813
set radius me 1.1.1.1
set bundle enable radius-auth radius-fallback

Here my radius server is 192.168.128.101 and interanl
interface of this mpd server is 192.168.64.65

1) What is this testing123? is that key between
radius server and the nas (the pptp box)?

set radius me 1.1.1.1
#send the given IP in the RAD_NAS_IP_ADDRESS attribute
to the server.

Could any guru explain this? which given IP address?

Thanks




__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]