[4385] in linux-net channel archive

home help back first fref pref prev next nref lref last post

Re: Authentication Server

daemon@ATHENA.MIT.EDU (Alan Cox)
Sat Sep 14 18:06:27 1996

From: alan@lxorguk.ukuu.org.uk (Alan Cox)
To: shibata@system.hitachi.co.jp (Hisaaki Shibata)
Date: 	Sat, 14 Sep 1996 21:53:08 +0100 (BST)
Cc: sakwoc@ssb.shell.com.my, Linux-net@vger.rutgers.edu
In-Reply-To: <9609141359.AA00944@echos.opost1.netspace.or.jp> from "Hisaaki Shibata" at Sep 14, 96 10:58:25 pm

> For servers, how about using RADIUS.
> Please see http://nic.merit.edu/radius/.index.html
> 
> Major terminal servers *may* suppot RADIUS, I think.
> 	#I set it up on BSD/OS with Portmaster and Ascend MAX4000.
> 
> For clients, I found radiusclient-0.26 at sunsite.
> Please see http://www.popnet.de/~lf/radius/

If you are going to use radius be aware there is a lot of work to do. The
merit radius code is extremely messy at the moment and also has serious bugs
that allow users to down the radius server by feeding it junk. A patch
to the worst one was posted to bugtraq along with a fix for the fact users
can fill your disk with directories of their creation.

Radius is a nice protocol but the implementation needs cleaning up.

Alan


home help back first fref pref prev next nref lref last post