安装radius+mysql.doc

安装freeradius+mysql+daloradius一、安装系统自带的mysql# yum update -y /更新yum源# yum install mysql-server /安装mysql服务# /etc/init.d/mysqld start /启动mysql服务# mysqladmin -u root -p password mzywx /修改mysql root用户默认密码Enter password: /原始密码为空，直接敲回车键# chkconfig -add mysqld /添加mysql服务# chkconfig mysqld on /开机自启动mysql服务# service mysqld status /查看mysql服务状态二、安装freeradius# yum install freeradius -y# yum install freeradius-mysql freeradius-perl freeradius-utils freeradius-ldap freeradius-python freeradius-devel -y# chown -R radiusd:radiusd /etc/raddb# chmod a+r /etc/raddb/dictionary# radiusd -X# sed -i s/#steve/steve/g /etc/raddb/users /或者执行vi +76 /etc/raddb/users取消注释生效：steve Cleartext-Password := testing# radtest steve testing localhost 1812 testing123 /注：另开启一个终端执行该命令出现Access-Accept字样说明成功。测试成功后把/etc/raddb/users改回去。# sed -i s/steve/#steve/g /etc/raddb/users /把/etc/raddb/users改回去三、freeradius和mysql的集成# mysql -uroot -pmzywx -ecreate database radius /创建radius数据库# mysql -uroot -pmzywx -eshow databases /查看是否创建成功+-+| Database |+-+| information_schema | mysql | radius | test |+-+# mysql -uroot -pmzywx radius /etc/raddb/sql/mysql/schema.sql# mysql -uroot -pmzywx radius /etc/raddb/sql/mysql/nas.sql# mysql -uroot -pmzywx radius /etc/raddb/sql/mysql/ippool.sql# mysql -uroot -pmzywx radius GRANT SELECT ON radius.* TO radiuslocalhost IDENTIFIED BY radpass;mysql GRANT ALL on radius.radacct TO radiuslocalhost;mysql GRANT ALL on radius.radpostauth TO radiuslocalhost;进入radius数据库、先加入一些组信息:mysql use radius;mysql insert into radgroupreply (groupname,attribute,op,value) values (user,Auth-Type,:=,Local);mysql insert into radgroupreply (groupname,attribute,op,value) values (user,Service-Type,=,Framed-User);mysql insert into radgroupreply (groupname,attribute,op,value) values (user,Framed-IP-Netmask,=,55);mysql insert into radgroupreply (groupname,attribute,op,value) values (user,Framed-IP-Netmask,:=,);然后加入用户信息：mysql INSERT INTO radcheck (UserName, Attribute, Value) VALUES (sqltest, Password, testpwd);然后把用户加到组里：mysql insert into radusergroup(username,groupname) values(sqltest,user);mysql select * from radcheck where UserName=sqltest;+-+-+-+-+-+| id | username | attribute | op | value |+-+-+-+-+-+| 1 | sqltest | Password | = | testpwd |+-+-+-+-+-+1 row in set (0.00 sec)mysql quitBye1.# sed -i s/#readclients = yes/readclients = yes/g /etc/raddb/sql.conf或者 编辑/etc/raddb/sql.confmysql用户名，密码根据自己的情况填写 /这里不用进行修改第88行取消readclients = yes 前的注释2.# sed -i 170s/files/#files/ /etc/raddb/sites-enabled/default# sed -i 177s/#.*/sql/ /etc/raddb/sites-enabled/default# sed -i 406s/#.*/sql/ /etc/raddb/sites-enabled/default或者编辑/etc/raddb/sites-enabled/default第170 行files前加注释第177 行取消sql前的注释第406 行取消sql前的注释3.# sed -i 125s/files/#files/ /etc/raddb/sites-enabled/inner-tunnel # sed -i 132s/#.*/sql/ /etc/raddb/sites-enabled/inner-tunnel或者编辑/etc/raddb/sites-enabled/inner-tunnel第125 行files前加注释第132 行取消sql前的注释4.# sed -i 30s/md5/peap/ /etc/raddb/eap.conf或者编辑/etc/raddb/eap.conf第30行default_eap_type = md5改为default_eap_type = peap5.编辑/etc/raddb/clients.conf,加入 /这一步骤根据实际情况添加IP地址、设备型号 client secret= tp-linkshortname = test6.启用radius的sql模块 /注：这一步骤必须执行，否则报错# sed -i 735s/#.*/$INCLUDE sql.conf/ /etc/raddb/radiusd.conf或者编辑/etc/raddb/radiusd.conf第735行# $INCLUDE sql.conf改为 $INCLUDE sql.conf /取消注释6.测试# radtest sqltest testpwd localhost 1812 testing123Sending Access-Request of id 138 to port 1812User-Name = sqltestUser-Password = testpwdNAS-IP-Address = 03NAS-Port = 1812Message-Authenticator = 0x00000000000000000000000000000000rad_recv: Access-Accept packet from host port 1812, id=138, length=32Service-Type = Framed-UserFramed-IP-Netmask = 出现Access-Accept字样说明成功。4、 安装apache# yum install httpd -y /安装apache# service httpd start /启动apache 有警告Starting httpd: httpd: Could not reliably determine the servers fully qualified domain name, using 03 for ServerName OK # chkconfig httpd on /设置开机自动启动apache# hostname /查看主机名AY140718211848765e37Z# sed -i 276s/#.*/ServerName AY140718211848765e37Z/ /etc/httpd/conf/httpd.conf /修改apache的配置文件# service httpd restart /重启apache 报错消失Stopping httpd: OK Starting httpd: OK # 本地浏览器访问，访问成功 五、安装PHP# yum install php -y /安装 PHP# yum install php-mysql -y /这个如果不安装，打开php+mysql的程序会出错的# yum install php-pear-DB -y /这个如果不安装，打开daloradius会报错# service httpd restart /重启apache 安装一下php扩展程序。# wget /go-pear.phar /下载php扩展# php go-gear.phar /安装php扩展六、安装Daloradius# 下载地址：/s/1bpcBHQB# tar zxvf daloradius-0.9-8.tar.gz -C /var/ww/html/daloradius# chown -R apache:apache /var/www/html/daloradius# cd /var/ww/html/daloradius# mysql -uroot -pmzywx radius contrib/db/mysql-daloradius.sql# mysql -uroot -pmzywx radius grant all privileges on radius.* to radius% identified by radpass;mysql flush privileges;测试配置好后在浏览器中打开，下面是默认登录用户名和密码http:/yourIP/daloradiuslogin：administratorpassword：radius可能出现的问题1、点击登录页面出错查看http错误日志信息/var/log/httpd/error_logMon Oct 14 15:44:51 2013 error client 5 PHP Warning: include_once(): Failed opening DB.php for inclusion (include_path=.:/usr/share/pear:/usr/share/php) in /var/www/html/daloradius/library/opendb.php on line 84, referer: 0/daloradius/login.phpMon Oct 14 15:44:51 2013 error client 5 PHP Fatal error: Class DB not found in /var/www/html/daloradius/library/opendb.php on line 86, referer: 0/daloradius/login.php提示数据库连接失败。再次检查连接数据库文件，没有问题。解决：新版本的daloradius连接数据库，需要安装数据库连接模块。php-pear-DB没办法安装吧！ yum install php-pear-DB再次打开web，