Re: mpd and radius

On Wed, 25 Jan 2006, gahn wrote:

> Hi all:
>
> I ahve some basic questions regarding the mpd.conf:
>
> set radius retries 3
> set radius timeout 3
> set radius server 192.168.128.101 testing123 1812 1813
> set radius me 1.1.1.1
> set bundle enable radius-auth radius-fallback
>
> Here my radius server is 192.168.128.101 and interanl
> interface of this mpd server is 192.168.64.65
>
> 1) What is this "testing123"? is that key between
> radius server and the nas (the pptp box)?

Yes. This is a shared secret between your radius server and "nas" boxes. 
Any clients which is accessing radius server should use their respective 
shared secret. If you are using freeradius you should configure it in 
clients.conf  and your "nas" box. You should also select a reasonably 
complex shared secret to prevent brute force guessing attack against your 
radius server.

>
> "set radius me 1.1.1.1
> #send the given IP in the RAD_NAS_IP_ADDRESS attribute
> to the server."

This one is the IP address configured for this NAS/client...

Regards,
  	Janos Mohacsi
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"