Это старая версия документа.
Installation manual
Radius
Download and install the latest version of FreeRadius [http://www.freeradius.org]
server$ tar zxvf freeradius-1.1.0.tar.gz server$ freeradius-1.1.0 server$ ./configure --prefix=/usr/local/radiusd/ server$ make server# make install (as root)
If you don’t see any errors - you have successfully installed radius server:
Next step is to configure radius server:
server# vi /usr/local/radiusd/etc/raddb/users
DEFAULT Auth-Type = Accept Exec-Program-Wait = "/usr/abills/libexec/rauth.pl"
server# vi /usr/local/radiusd/etc/raddb/acct_users
DEFAULT Acct-Status-Type == Start Exec-Program = "/usr/abills/libexec/racct.pl" DEFAULT Acct-Status-Type == Alive Exec-Program = "/usr/abills/libexec/racct.pl" DEFAULT Acct-Status-Type == Stop Exec-Program = "/usr/abills/libexec/racct.pl"
server# vi /usr/local/radiusd/etc/raddb/clients.conf
Put the IP/name and password of your NAS server:
client nashost.nasdomain { secret = radsecret shortname = shorrname }
server# vi /usr/local/radiusd/etc/raddb/radiusd.conf
The following lines must be commented:
'chap' and 'mschap' in section 'authorize'
authorize { preprocess # chap # counter # attr_filter # eap suffix files # etc_smbpasswd # sql # mschap }
MySQL
Download the tarball from [http://www.mysql.com]
server$ tar xvfz mysql-4.1.16.tar.gz server$ cd mysql-4.1.16 server$ ./configure server$ make server# make install (as root)
Create user and database:
server# mysql
use mysql; INSERT INTO user (Host, User, Password) VALUES ('localhost','abills', password('sqlpassword')); INSERT INTO db (Host, Db, User, Select_priv, Insert_priv, Update_priv, Delete_priv, Create_priv, Drop_priv, Index_priv, Alter_priv, Lock_tables_priv, Create_tmp_table_priv) VALUES ('localhost', 'abills', 'abills', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y'); CREATE DATABASE abills; flush privileges;
Create tables in the database:
server# mysql -D abills < abills.sql
Perl modules
You need install some perl modules before proceed:
DBI | |
DBD::mysql | |
Digest-MD5 | for Chap authorization |
Digest-MD4 | for MS-Chap authorization |
Crypt-DES | for MS-Chap authorization |
Digest-SHA1 | for MS-ChapV2 authorization |
libnet | Only for UNIX type authorization |
Time-HiRes | Show authorization,page generation time. |
Download it from [http://www.cpan.org]
Web Server
Apache
Edit httpd.conf
#Abills version 0.3 # User interface Alias /abills "/usr/abills/cgi-bin/" <Directory "/usr/abills/cgi-bin"> <IfModule mod_rewrite.c> RewriteEngine on RewriteCond %{HTTP:Authorization} ^(.*) RewriteRule ^(.*) - [E=HTTP_CGI_AUTHORIZATION:%1] Options Indexes ExecCGI SymLinksIfOwnerMatch </IfModule> AddHandler cgi-script .cgi Options Indexes ExecCGI FollowSymLinks AllowOverride none DirectoryIndex index.cgi Order allow,deny Allow from all
<Files ~ "\.(db|log)$"> Order allow,deny Deny from all </Files> </Directory> #Admin interface <Directory "/usr/abills/cgi-bin/admin"> AddHandler cgi-script .cgi Options Indexes ExecCGI FollowSymLinks AllowOverride none DirectoryIndex index.cgi order deny,allow allow from all </Directory>
ABillS
Download it from [http://sourceforge.net/projects/abills/]
server# tar zxvf abills-0.3x.tgz server# cp -Rf abills /usr/
server# vi /usr/abills/libexec/config.pl
#DB configuration $conf{dbhost}='localhost'; $conf{dbname}='abills'; $conf{dblogin}='abills'; $conf{dbpasswd}='sqlpassword'; $conf{ADMIN_MAIL}='info@your.domain'; $conf{USERS_MAIL_DOMAIN}="your.domain"; $conf{secretkey}="test12345678901234567890";
server# vi /etc/crontab
\*/5 * * * * root /usr/abills/libexec/billd -all 1 0 * * * root /usr/abills/libexec/periodic daily 1 0 * * * root /usr/abills/libexec/periodic monthly
Change the permissions:
server# chown -Rf www /usr/abills/cgi-bin
Open the web interface http://your.host/abills/admin/
Default user abills
password abills
First of all must fill the parameters for NAS server:
System configuration→NAS
Parameters
IP | IP address NAS |
---|---|
Name | Name |
Radius NAS-Identifier | NAS-Identifier (optional) |
Describe | Server decription |
Type | Server type |
Authorization | Type of authorization. SYSTEM (/etc/passwd) SQL -use SQL database (MySQL, PosgreSQL) |
Alive | Alive period |
Disable | Disable |
:Manage: | NAS server management |
IP:PORT | IP address and port to control connections |
User | Username |
Password | Password |
RADIUS Parameters | Further parameters for NAS after login. |
Here you need to add ip address range IP POOLs.
FIRST IP | First IP |
---|---|
COUNT | Count IP |
Create tariff plans:
Menu:
System configuration→Dialup & VPN→Tarif Plans
Register a customer:
Customers→Users→Add
Testing
# radtest testuser testpassword 127.0.0.1:1812 0 radsecret 0 127.0.0.1
See ‘/usr/abills/var/log/abills.log’ for more details (errors,messages)
2005-02-23 12:55:55 LOG_INFO: AUTH [testuser] NAS: 1 (xxx.xxx.xxx.xxx) GT: 0.03799