The following are examples of how to set the exauth.properties file when using a RADIUS server to perform authentication:
-
When linking to only an external authentication server
auth.server.type=radius auth.server.name=ServerName auth.group.mapping=false auth.radius.ServerName.protocol=PAP auth.radius.ServerName.host=radius.example.com auth.radius.ServerName.port=1812 auth.radius.ServerName.timeout=1 auth.radius.ServerName.retry.times=3 auth.radius.ServerName.attr.NAS-Identifier=host_A
-
When directly specifying information about an external authorization server
auth.server.type=radius auth.server.name=ServerName auth.group.mapping=true auth.ocsp.enable=false auth.ocsp.responderURL= auth.radius.ServerName.protocol=PAP auth.radius.ServerName.host=radius.example.com auth.radius.ServerName.port=1812 auth.radius.ServerName.timeout=1 auth.radius.ServerName.retry.times=3 auth.radius.ServerName.attr.NAS-Identifier=host_A auth.radius.ServerName.domain.name=EXAMPLE.COM auth.radius.ServerName.dns_lookup=false auth.group.EXAMPLE.COM.protocol=ldap auth.group.EXAMPLE.COM.host=ldap.example.com auth.group.EXAMPLE.COM.port=389 auth.group.EXAMPLE.COM.basedn=dc=Example,dc=com auth.group.EXAMPLE.COM.timeout=15 auth.group.EXAMPLE.COM.retry.interval=1 auth.group.EXAMPLE.COM.retry.times=20
-
When using the DNS server to look up an external authorization server
auth.server.type=radius auth.server.name=ServerName auth.group.mapping=true auth.radius.ServerName.protocol=PAP auth.radius.ServerName.host=radius.example.com auth.radius.ServerName.port=1812 auth.radius.ServerName.timeout=1 auth.radius.ServerName.retry.times=3 auth.radius.ServerName.attr.NAS-Identifier=host_A auth.radius.ServerName.domain.name=EXAMPLE.COM auth.radius.ServerName.dns_lookup=true auth.group.EXAMPLE.COM.protocol=ldap auth.group.EXAMPLE.COM.basedn=dc=Example,dc=com auth.group.EXAMPLE.COM.timeout=15 auth.group.EXAMPLE.COM.retry.interval=1 auth.group.EXAMPLE.COM.retry.times=20
-
When using a redundant configuration
auth.server.type=radius auth.server.name=ServerName1,ServerName2 auth.group.mapping=false auth.radius.ServerName1.protocol=PAP auth.radius.ServerName1.host=radius1.example.com auth.radius.ServerName1.port=1812 auth.radius.ServerName1.timeout=1 auth.radius.ServerName1.retry.times=3 auth.radius.ServerName1.attr.NAS-IP-Address=127.0.0.1 auth.radius.ServerName2.protocol=PAP auth.radius.ServerName2.host=radius2.example.com auth.radius.ServerName2.port=1812 auth.radius.ServerName2.timeout=1 auth.radius.ServerName2.retry.times=3 auth.radius.ServerName2.attr.NAS-IP-Address=127.0.0.1