[pptp-server] pppd + pptp + radius

[Igor Maciel Macaúbas]

Hi David,

I would like to know more details about the first solution; I don't need
accounting, get static ip from radius and this stuff.
I use accouting with a propertary software in PHP that analyzes the PPP
log.. so I just need one solution to authenticate via RADIUS. Just auth.
Can you give me more details?
I was looking at my RADIUS server page (freeradius - www.freeradius.org) and
I saw that there's a PAM module inside this RADIUS distro.
So, how can I use it to authenticate my pptpd / pppd into my RADIUS server?
How can I proceed to make the pam-lradius module to do the auth in my
system?
Thanks a lot for helping me.

Regards,
Igor
--
igor at br.inter.net


----- Original Message -----
From: "David Luyer" <david_luyer at pacific.net.au>
To: "'Igor Maciel Macaúbas'" <igor at br.inter.net>;
<pptp-server at lists.schulte.org>
Sent: Sunday, March 10, 2002 1:16 AM
Subject: RE: [pptp-server] pppd + pptp + radius


> There are two solutions.
>
> 1.  Using PAM and one of the two PAM RADIUS modules, authenticate via
>     RADIUS (one module is pam-lradius, the other is in the base PAM
>     distro)
>
>     Caveat: this doesn't get static IPs from RADIUS or do accounting
>             via RADIUS.
>
> 2.  Using one of the two PortSlave distributions, do authentication,
>     IP address allocation, etc from RADIUS.  Combined with something
> like
>     gated, this can mean your users can authenticate via either the VPN
>     or a dialup NAS and get the same IP address.  Accounting is also via
>     RADIUS as per dialup NAS's.
>
>     Caveat: you may need to look at the code carefully to ensure
> reliable
>             traffic accounting and run an exact version of pppd.  I
> haven't
>             ever tried using a PortSlave PPPd and adding the MSCHAP
> patches.
>
> I've done both of these at different places I've worked as well as using
> a third option - authenticating via a Bay ERPCD.
>
> David.
> --
> David Luyer                                     Phone:   +61 3 9674 7525
> Network Development Manager    P A C I F I C    Fax:     +61 3 9699 8693
> Pacific Internet (Australia)  I N T E R N E T   Mobile:  +61 4 1111 BYTE
> http://www.pacific.net.au/                      NASDAQ:  PCNTF
>
>
> > -----Original Message-----
> > From: pptp-server-admin at lists.schulte.org
> > [mailto:pptp-server-admin at lists.schulte.org] On Behalf Of
> > Igor Maciel Macaúbas
> > Sent: Sunday, 10 March 2002 2:47 AM
> > To: pptp-server at lists.schulte.org
> > Subject: [pptp-server] pppd + pptp + radius
> >
> >
> > Hi all,
> > I use a VPN Solution in my company with pppd / pptp to make
> > Windows machine
> > access some restricted areas of my network.
> > Since the number of users using this solution is increasing,
> > I need to make
> > the VPNServer authenticate into my company radius server.
> > I was looking at the internet, and didn't find a lot of
> > solutions .. so I
> > need to know if it's possible, and how can I do that.
> > If someone have anything that can help me, send :)
> > I've been researching this question about 8 months and didn't have any
> > answer.
> >
> > Thanks,
> > Igor
> > --
> > igor at br.inter.net
> >
> >
> > _______________________________________________
> > pptp-server maillist  -  pptp-server at lists.schulte.org
> > http://lists.schulte.org/mailman/listinfo/pptp-server
> > --- To unsubscribe, go to the url just above this line. --
> >
> >
>