Radius

Zusatztext The subject of security never strays far from the minds of IT workers! for good reason. If there is a network with even just one connection to another network! it needs to be secured. RADIUS! or Remote Authentication Dial-In User Service! is a widely deployed protocol that enables companies to authenticate! authorize and account for remote users who want access to a system or service from a central network server. Originally developed for dial-up remote access! RADIUS is now used by virtual private network (VPN) servers! wireless access points! authenticating Ethernet switches! Digital Subscriber Line (DSL) access! and other network access types. Extensible! easy to implement! supported! and actively developed! RADIUS is currently the de facto standard for remote authentication.RADIUS provides a complete! detailed guide to the underpinnings of the RADIUS protocol! with particular emphasis on the utility of user accounting. Author Jonathan Hassell draws from his extensive experience in Internet service provider operations to bring practical suggestions and advice for implementing RADIUS. He also provides instructions for using an open-source variation called FreeRADIUS."RADIUS is an extensible protocol that enjoys the support of a wide range of vendors!" says Jonathan Hassell. "Coupled with the amazing efforts of the open source development community to extend RADIUS's capabilities to other applications-Web! calling card security! physical device security! such as RSA's SecureID-RADIUS is possibly the best protocol with which to ensure only the people that need access to a resource indeed gain that access."This unique book covers RADIUS completely! from the history and theory of the architecture around which it was designed! to how the protocol and its ancillaries function on a day-to-day basis! to implementing RADIUS-based security in a variety of corporate and service provider environments. If you are an ISP owner or administrator! corporate IT professional responsible for maintaining mobile user connectivity! or a web presence provider responsible for providing multiple communications resources! you'll want this book to help you master this widely implemented but little understood protocol. Informationen zum Autor Jonathan Hassell is a systems administrator, IT consultant, and industry author residing in Raleigh, NC. He has extensive experience in networking technologies and Internet connectivity and currently runs his own web hosting business, Enable Hosting. He is the author of "RADIUS" for O'Reilly and Associates and is a columnist for WindowsITSecurity.COM and Pinnacle's Linux AppDev newsletter. He has also worked with IBM to develop a tutorial on Apache web server optimization. Klappentext The subject of security never strays far from the minds of IT workers, for good reason. If there is a network with even just one connection to another network, it needs to be secured. RADIUS, or Remote Authentication Dial-In User Service, is a widely deployed protocol that enables companies to authenticate, authorize and account for remote users who want access to a system or service from a central network server. Originally developed for dial-up remote access, RADIUS is now used by virtual private network (VPN) servers, wireless access points, authenticating Ethernet switches, Digital Subscriber Line (DSL) access, and other network access types. Extensible, easy to implement, supported, and actively developed, RADIUS is currently the de facto standard for remote authentication.RADIUS provides a complete, detailed guide to the underpinnings of the RADIUS protocol, with particular emphasis on the utility of user accounting. Author Jonathan Hassell draws from his extensive experience in Internet service provider operations to bring practical suggestions and advice for implementing RADIUS. He also provides instructions for using an open-source variation called FreeRADIUS."RADIUS is an...

List of contents

Preface;
Audience;
Organization;
Conventions Used in This Book;
How to Contact Us;
Acknowledgments;
Chapter 1: An Overview of RADIUS;
1.1 An Overview of AAA;
1.2 Key Points About AAA Architecture;
1.3 The Authorization Framework;
1.4 And Now, RADIUS;
Chapter 2: RADIUS Specifics;
2.1 Using UDP versus TCP;
2.2 Packet Formats;
2.3 Packet Types;
2.4 Shared Secrets;
2.5 Attributes and Values;
2.6 Authentication Methods;
2.7 Realms;
2.8 RADIUS Hints;
Chapter 3: Standard RADIUS Attributes;
3.1 Attribute Properties;
Chapter 4: RADIUS Accounting;
4.1 Key Points in RADIUS Accounting;
4.2 Basic Operation;
4.3 The Accounting Packet Format;
4.4 Accounting Packet Types;
4.5 Accounting-specific Attributes;
Chapter 5: Getting Started with FreeRADIUS;
5.1 Introduction to FreeRADIUS;
5.2 Installing FreeRADIUS;
5.3 In-depth Configuration;
5.4 Troubleshooting Common Problems;
Chapter 6: Advanced FreeRADIUS;
6.1 Using PAM;
6.2 Proxying and Realms;
6.3 Using the clients.conf File;
6.4 FreeRADIUS with Some NAS Gear;
6.5 Using MySQL with FreeRADIUS;
6.6 Simultaneous Use;
6.7 Monitoring FreeRADIUS;
Chapter 7: Other RADIUS Applications;
7.1 RADIUS for Web Authentication;
7.2 Using the LDAP Directory Service;
7.3 Parsing RADIUS Accounting Files;
Chapter 8: The Security of RADIUS;
8.1 Vulnerabilities;
8.2 The Extensible Authentication Protocol;
8.3 Compensating for the Deficiencies;
8.4 Modifying the RADIUS Protocol;
Chapter 9: New RADIUS Developments;
9.1 Interim Accounting Updates;
9.2 The Apple Remote Access Protocol;
9.3 The Extensible Authentication Protocol;
9.4 Tunneling Protocols;
9.5 New Extensions Attributes;
Chapter 10: Deployment Techniques;
10.1 Typical Services;
10.2 RADIUS and Availability;
10.3 Other Things RADIUS;
Attribute Reference;
Colophon;

Product details

• Authors: Jonathan Hassell, Hassell Jonathan
• Publisher: External catalogues_US
• Languages: English
• Product format: Paperback / Softback
• Released: 18.10.2002
• EAN: 9780596003227
• ISBN: 978-0-596-00322-7
• Dimensions: 182 mm x 235 mm x 15 mm
• Series: O'Reilly Ser.
• Subjects: Natural sciences, medicine, IT, technology > IT, data processing > IT; COMPUTERS / Networking / General, Computer networking & communications, Computer networking and communications, Radius protocol remote authenticate