
4-1
Configuring RADIUS
If you are using the RADIUS option for authenticating users, you must:
Enable RADIUS (default is disabled)
Enter the IP address of a RADIUS server
Enter the shared secret (text string that serves as a password between a
RADIUS client and the SCS)
Enter the timeout (server connection timeout)
1. With Configure RADIUS selected, press Enter. The RADIUS prompt
displays.
2. Select Yes to enable RADIUS to authenticate users, and press Enter.
3. Enter lines containing the IP Address of a RADIUS server, the shared secret,
and the timeout in seconds (optional). You may specify an optional port with
the IP Address (in the form IP Address:Port); if you do not specify an optional
port, the SCS uses the default RADIUS ports, 1812 and 1813.
4. The format for each line is:
server-IP-address[:port] secret [timeout]
RADIUS Servers
Edit RADIUS Servers?
(Use <Escape> to end edit)
Please install lines containing the IP Address (in dot quad
notation) of a RADIUS server, the shared secret, and
optionally the timeout in seconds. Each line shall be of
the form:
# 192.168.0.10:45 secret 1
# radiusserver.domain.com other-secret 3
5. Press Esc. The User Authentication Menu returns with Configure Global
Port Permissions selected. Continue with Configure Global Port
Permissions or Done User Authentication.
Configuring Global Port Permissions
With this option, you can configure global default port permissions for users. This
is useful if you are using NIS, LDAP, or RADIUS to authenticate users and you
have not used “adduser” to create a port permissions file for every user. The
global port permissions will be used for users who do not have their own port
permissions file or do not have port permissions specified in an NIS map.
You can configure the following permissions:
Allow Direct (direct mode default port permissions; users may interact
with a port) See page 7-5 for more information on direct mode.
Allow Listen (listen mode default port permissions; users may only view
the data on a port)
Allow Clear (clear default port permissions; users may clear the port
buffer)
Comentários a estes Manuais