centos6.5 安装freeradius

Centos 6.5上编译安装freeradius3.0.10

平台：Centos 6.5 x86_64

1，安装源并更新

Rpm -Uvh

https://www.360docs.net/doc/9d8745582.html,/pub/epel/6/x86_64/epel-RELEASE-6-8.noarch.rpm

rpm -Uvh https://www.360docs.net/doc/9d8745582.html,/enterprise/remi-RELEASE-6.rpm

yum UPDATE -y

2，安装相关库

yum -y install wget expat-devel gcc make gmp-devel gmp pkgconfig perl libpcap gcc-c++ logrotate tar cpio gawk flex bison bison-devel lsof libpcap-devel patch openssl openssl-devel libgcrypt* crypt* autoconf automake libtasn1-devel zlib zlib-devel trousers trousers-devel texinfo libnl-devel libnl dbus dbus-devel ncurses-devel readline-devel libtool-ltdl libtalloc* hiredis* redhat-lsb python mysql-devel

3，安装Mysql和Apache

yum --enablerepo=remi -y install mysql mysql-server mysql-devel httpd httpd-devel chkconfig httpd on

chkconfig mysqld on

service mysqld start

mysql_secure_installation

mysql -u root -p 输入密码

创建你需要的数据库

4，安装php

yum --enablerepo=remi install -y php php-mysql php-common php-devel php-gd php-imap php-ldap php-odbc php-pear php-xml php-xmlrpc php-mbstring php-mcrypt php-bcmath php-mhash php-snmp php-process libmcrypt libmcrypt-devel

wget https://www.360docs.net/doc/9d8745582.html,/cont/download/ioncube_loaders_lin_x86-64.tar.gz tar zxvf ioncube_loaders_lin_x86-64.tar.gz

cp -rf ioncube /usr/local/

sed -i 's/post_max_size = 8M/post_max_size = 50M/g' /etc/php.ini

sed -i 's/upload_max_filesize = 2M/upload_max_filesize = 50M/g' /etc/php.ini

sed -i 's/;date.timezone =/date.timezone = PRC/g' /etc/php.ini

sed -i 's/; cgi.fix_pathinfo=1/cgi.fix_pathinfo=0/g' /etc/php.ini

sed -i 's/max_execution_time = 30/max_execution_time = 300/g' /etc/php.ini

sed -i 's/disable_functions =.*/disable_functions = passthru,exec,system,chroot,scandir,chgrp,chown,shell_exec,proc_open,proc_ge t_status,popen,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepas sthru,stream_socket_server/g' /etc/php.ini

echo "zend_extension=/usr/local/ioncube/ioncube_loader_lin_5.4.so">> /etc/php.ini

wget https://www.360docs.net/doc/9d8745582.html,/pub/Releases/3.2.0/xcache-3.2.0.tar.gz

tar -zxvf xcache-3.2.0.tar.gz

cd xcache-3.2.0

phpize --clean

phpize

./configure --enable-xcache

make && make install

cat xcache.ini >> /etc/php.ini

service httpd restart

5，编译安装freeradius

wget ftp://https://www.360docs.net/doc/9d8745582.html,/pub/freeradius/freeradius-server-3.0.10.tar.gz

tar zxvf freeradius-server-3.0.10.tar.gz

cd freeradius-server-3.0.10

./configure --with-modules=rlm_sql_mysql (各种WARNING，没有ERROR) make && make install

6，测试

调试模式命令：

radiusd -X

提示Refusing to start with libssl version OpenSSL 1.0.1e

vi /usr/local/etc/raddb/radiusd.conf

找到allow_vulnerable_openssl = no,修改成allow_vulnerable_openssl = yes 再次启动radiusd -X

新打开一个终端

vi /usr/local/etc/raddb/users

找到这一行

#steve Cleartext-Password:="testing"

将前面的#去掉

radtest steve testing localhost 0 testing123

radtest 17000001111 111111 localhost 0 testing123

获得结果：

Sent Access-Request Id 41 from 0.0.0.0:35117 to 127.0.0.1:1812 length 75 User-Name = "steve"

User-Password = "testing"

NAS-IP-Address = 106.185.45.18

NAS-Port = 0

Message-Authenticator = 0x00

Cleartext-Password = "testing"

Received Access-Accept Id 41 from 127.0.0.1:1812 to 0.0.0.0:0 length 20

accept！貌似成了，玩去吧 ^_^

还有一种简单的yum安装

添加源：

cd /etc/yum.repos.d/

wget

https://www.360docs.net/doc/9d8745582.html,/repositories/home:freeradius:3.0.x:centos/CentOS_C entOS-6/home:freeradius:3.0.x:centos.repo

yum install -y freeradius freeradius-utils freeradius-mysql

安装的版本是freeradius 3.0.3

Freeradiusd mysql 相关配置

参考文献：https://www.360docs.net/doc/9d8745582.html,/cluniquecui/article/details/42490423

5.3 创建数据库

命令如下：

mysql -u root –p

要求输入密码时，直接回车即可。

mysql>create database radius;

mysql>grant all on radius.* to radius@localhost identified by "radpass";

mysql>exit;

5.4 导入表结构

命令如下：

mysql -u root radius < /etc/raddb/mods-config/sql/main/mysql/scheama.sql

上面的指令，共导入了7个表，分别是：

radcheck 用户检查信息表

radreply 用户回复信息表

radgroupcheck 用户组检查信息表

radgroupreply 用户组检查信息表

radusergroup 用户和组关系表

radacct 计费情况表

radpostauth 认证后处理信息，可以包括认证请求成功和拒绝的记录。

5.5 建立组信息和用户信息

输入mysql -u root radius，打开数据库，在mysql> 提示符下，执行如下命令：1. 建立组信息：（在此新建组名称为user）

insert into radgroupreply (groupname,attribute,op,value) values

('user','Auth-Type',':=','Local');

insert into radgroupreply (groupname,attribute,op,value) values

('user','Service-Type',':=','Framed-User');

insert into radgroupreply (groupname,attribute,op,value) values

('user','Framed-IP-Address',':=','255.255.255.255');

insert into radgroupreply (groupname,attribute,op,value) values

('user','Framed-IP-Netmask',':=','255.255.255.0');

2. 建立用户信息：（在此新建用户名为test，密码为testpwd）

insert into radcheck (username,attribute,op,value) values

('test','Cleartext-Password',':=','testpwd');

3. 将用户加入组中：

insert into radusergroup (username,groupname) values ('test','user');

5.6 修改FreeRADIUS中的mysql 认证配置

执行如下命令：

cd /etc/raddb/mods-enabled

ln -s ../mods-available/sql

5.7 修改FreeRADIUS中的mysql 配置文件

该配置文件位于/etc/raddb/mods-available目录，名称为sql

可以通过vi来修改，命令如下：

vi /etc/raddb/mods-available/sql

找到driver = “rlm_sql_null”这一行，修改为driver = “rlm_sql_mysql”。保持并退出。

修改数据库配置文件

**vim /usr/local/etc/raddb/mods-available/sql

修改次地方，radacct 表里面的时间才会记录正确

注释215 -241 行：

**vim /usr/local/etc/raddb/sites-enabled/default

5.8 测试通过数据库做用户认证1. 重新以调试方式运行freeradius：

radiusd -X

2. 再打开一个新的终端，运行测试工具命令：radtest test testpwd localhost 1812 testing123

注意事项：

软连接建立：

1 cd /usr/local/etc/raddb/sites-enabled ln -s ../sites-available/coa

ln -s ../sites-available/originate-coa 2 cd /usr/local/etc/raddb/mods-enabled/

ln -s ../mods-available/sql