服务器评测
Ubuntu 16.04.1 LTS下安装FreeRADIUS2.2.8并开启MySQL认证
更新系统
sudo apt update
sudo apt upgrade
安装MariaDB
sudo apt-get install software-properties-common
sudo apt-key adv –recv-keys –keyserver hkp://keyserver.ubuntu.com:80 0xF1656F24C74CD1D8
sudo add-apt-repository ‘deb [arch=amd64,i386,ppc64el] http://mirrors.tuna.tsinghua.edu.cn/mariadb/repo/10.1/ubuntu xenial main’
sudo apt update
sudo apt install mariadb-server
安装freeradius
用mysql来存储相关数据，安装vim是为了使用语法高亮方便一点，不是必须的。
sudo apt-get install freeradius freeradius-mysql vim
ps -ef |grep freeradius
测试freeradius
vi /etc/freeradius/users
找到这一行
#steve Cleartext-Password:=”testing”
将前面的#去掉
steve Cleartext-Password := “testing”
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-IP-Address = 172.16.3.33,
Framed-IP-Netmask = 255.255.255.0,
Framed-Routing = Broadcast-Listen,
Framed-Filter-Id = “std.ppp”,
Framed-MTU = 1500,
Framed-Compression = Van-Jacobsen-TCP-IP
调试的命令为：
sudo freeradius -X
freeradius测试，新打开一个终端
radtest steve testing localhost 0 testing123
结果：
Sending Access-Request of id 44 to 127.0.0.1 port 1812
User-Name = “steve”
User-Password = “testing”
NAS-IP-Address = 127.0.1.1
NAS-Port = 0
Message-Authenticator = 0x00000000000000000000000000000000
rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=44, length=71
Service-Type = Framed-User
Framed-Protocol = PPP
Framed-IP-Address = 172.16.3.33
Framed-IP-Netmask = 255.255.255.0
Framed-Routing = Broadcast-Listen
Filter-Id = “std.ppp”
Framed-MTU = 1500
Framed-Compression = Van-Jacobson-TCP-IP
Access-Accept表示成功
将radius和mysql融合
输入mysql -u root -p，输入密码
1)建立数据库并导入radius数据结构
mysql>create database radius;
mysql>grant all on radius.* to ‘radius’@’localhost’ identified by ‘radpass’;
mysql>flush privileges;
#mysql -u root -p radius </etc/freeradius/sql/mysql/schema.sql
2)建立组（在此新建组名称为user）
#mysql -u root -p
use radius;
insert into radgroupreply (groupname,attribute,op,value) values (‘user’,’Auth-Type’,’:=’,’Local’);
insert into radgroupreply (groupname,attribute,op,value) values (‘user’,’Service-Type’,’:=’,’Framed-User’);
insert into radgroupreply (groupname,attribute,op,value) values (‘user’,’Framed-IP-Address’,’:=’,’255.255.255.255′);
insert into radgroupreply (groupname,attribute,op,value) values (‘user’,’Framed-IP-Netmask’,’:=’,’255.255.255.0′);
3)建立用户（在此新建用户名为test，密码为testpwd）
insert into radcheck (username,attribute,op,value) values (‘test’,’Cleartext-Password’,’:=’,’testpwd’);
4)将用户加入组中：
insert into radusergroup (username,groupname) values (‘test’,’user’);
exit
5)开启SQL认证
vim /etc/freeradius/sql.conf
修改里面的用户名和密码:（下面为默认帐号密码，按数据库实际用户密码修改）
login = “radius”
password = ” radpass”
vim /etc/freeradius/radiusd.conf将$INCLUDE sql.conf前的#去掉
vim /etc/freeradius/sites-available/default将sql前的#去掉
6)测试：
sudo freeradius -X，在另一终端执行radtest test testpw：d localhost 1812 testing123
获得结果：
Sending Access-Request of id 71 to 127.0.0.1 port 1812
User-Name = “test”
User-Password = “testpwd”
NAS-IP-Address = 127.0.1.1
NAS-Port = 1812
Message-Authenticator = 0x00000000000000000000000000000000
rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=71, length=38
Service-Type = Framed-User
Framed-IP-Address = 255.255.255.255
Framed-IP-Netmask = 255.255.255.0
Access-Accept表示成功
本文永久更新链接地址：http://www.linuxidc.com/Linux/2017-01/139683.htm
