TweetFollow Us on Twitter

Using the RADIUS Service in OS X 10.5

Volume Number: 23 (2007)
Issue Number: 11
Column Tag: Networking

Using the RADIUS Service in OS X 10.5

Aimed at Airports, but flexible under the hood

By Ben Greisler

Why RADIUS?

Controlling access to your wireless network has just become easier with the inclusion of RADIUS services in Leopard Server. Providing a central method for controlling user access to Airport access points (and other RADIUS capable devices), the Leopard implementation is Apple simple.

RADIUS Services in Leopard 10.5

Setting up RADIUS in Leopard server is very straightforward. You can either use the wizard or manually set it up manually. Normally I would say that using a wizard is the easy method, but in this case even the manual method is very simple to follow. Regardless of the method, you will end up with a working set up.

In my test environment I set up an Airport Extreme (round) and configured it to bridge. This has nothing to do with the RADIUS setup, but will be similar to how other will be using it. I had a working OD master on my network and I set up a group of users authorized to connect to the wireless network. I then bound my Leopard server to the OD and checked that I could recognize OD users from the Leopard machine. The RADIUS services can be set using SACL's (Service ACL's) making it very flexible from an authorization standpoint. Once that was set I was able to start the RADIUS configuration.


Fig. 1. Activating the RADIUS service in Server Admin

Wizard Method:

Open Server Admin and activate the RADIUS service in Settings/Services. This will make the RADIUS service available in the services list.

In the RADIUS service Overview pane, click the "Configure RADIUS Service..." button.


Fig. 2. RADIUS Service Overview pane

The first page lets you chose what certificate you want to use. You can pick an existing certificate or create a self signed certificate.


Fig. 3. Pick your certificate or make your own

With your Airports up and running, you should see them in the Add Base Stations page. Pick the ones you want to use RADIUS with and fill in the Airports administrative password, then click "Add." Once the base stations have populated the Selected Base Stations window, click "Continue."


Fig. 4. Select the Airports you want authorized via RADIUS

The next window allows you set up who will be authorized to connect to the wireless network. We had set up an Open Directory group named "radiususers" in this example and selected it.


Fig. 5. Pick your group to limit users or allow all users

In the next windows, much like the final steps of configuring an OSX Server, you are given the opportunity to do a final check of your RADIUS configuration.


Fig. 6. Check your settings and commit them

The final window simply announces the successful configuration of RADIUS services.


Fig. 7. Success! Start logging in!

Manual Method:

Open Server Admin and activate the RADIUS service in Settings/Services. This will make the RADIUS service available in the services list.

In the RADIUS service Settings pane, we need to configure our certificates. If you choose a custom configuration you will be presented with you choices of where the certificates reside and a quick link to the Certificate Management page.


Fig. 8. RADIUS settings page


Fig. 9. Certificate locations


Fig. 10. Certificate management

The RADIUS settings page has an "Edit Allowed Users..." button bringing you to the SACL's page where you can define which groups can be authorized.


Fig. 11. When defining an authorized group, you can use any method of building the groups for maximum utility such as nesting


Fig. 12. The Base Stations window gives you the tools to manage your access points

In the Base Stations window you can browse for Airports or add them manually.

When browsing for Airports, you simply pick the devices you want, type in the administrator password for the device and the RADIUS service does the rest. It will communicate with the Airport, define a random shared secret and restart the Airport.


Fig. 13. Browsing for Airports


Fig. 14. If we now look at the Aiport in the AirPort Utility we can see that the RADIUS configuration has been set for us

If we pick the "Add" button, we are able to directly configure an Airport. It won't be as easy, but it is necessary for Airports not visible while browsing. You will also need to manually configure the Airport in the AirPort Utility with the shared secret. You could also set up non-Airport devices using this method.


Fig. 15. Configuring the Airport manually

To ease the rollout to Mac clients, you can export an Internet Connect plist. Click on the "Save Internet Connect File" button.


Fig. 16. Exporting the Internet Connect file


Fig. 17. With everything else configured we can get our clients connecting


Fig. 18. The user experience when connecting to a RADIUS controlled Airport

Command Line:

RADIUS in Leopard is based on FreeRADIUS and is configurable via command line. Visit the man page for details:

leoserver:~ leoadmin$ man radiusd

Take particular note of the ordering of the radius.conf contents if you decide to modify it directly. A change of ordering can make the server not work any more. This is noted in the man page and is worth repeating.

If you want to examine the files that make RADIUS work, go to /etc/raddb. Logs live at /var/log/radius/radius.log.

Conclusion

RADIUS services in Leopard server is a great addition to the set of tool Apple has given us. While Apple's implementation is really aimed at Apple Airport users, it should also work with other devices.


Ben has been everything from a Mac user to CTO of one of the leading Macintosh professional services firms. Besides writing an occasional article for MacTech, you can find him presenting at Macworld (including a session called "DNS: Demystified, co-presented with Doug Hanley) or consulting with clients around the world. You can reach him at ben@greisler.org.

 

Community Search:
MacTech Search:

Software Updates via MacUpdate

Macs Fan Control 1.5.14 - Monitor and co...
Macs Fan Control allows you to monitor and control almost any aspect of your computer's fans, with support for controlling fan speed, temperature sensors pane, menu-bar icon, and autostart with... Read more
VueScan 9.7.96 - Scanner software with a...
VueScan is a scanning program that works with most high-quality flatbed and film scanners to produce scans that have excellent color fidelity and color balance. VueScan is easy to use, and has... Read more
FileMaker Pro 19.6.1 - Quickly build cus...
FileMaker Pro is the tool you use to create a custom app. You also use FileMaker Pro to access your app on a computer. Start by importing data from a spreadsheet or using a built-in Starter app to... Read more
Duet 3.1.0.0 - Use your iPad as an exter...
Duet is the first app that allows you to use your iDevice as an extra display for your Mac using the Lightning or 30-pin cable. Note: This app requires a iOS companion app. Release notes were... Read more
Firefox 107.0.1 - Fast, safe Web browser...
Firefox offers a fast, safe Web browsing experience. Browse quickly, securely, and effortlessly. With its industry-leading features, Firefox is the choice of Web development professionals and casual... Read more
War Thunder 2.21.1.91 - Multiplayer war...
In War Thunder, aircraft, attack helicopters, ground forces and naval ships collaborate in realistic competitive battles. You can choose from over 1,500 vehicles and an extensive variety of combat... Read more
Numbers 12.2.1 - Apple's spreadshee...
With Apple Numbers, sophisticated spreadsheets are just the start. The whole sheet is your canvas. Just add dramatic interactive charts, tables, and images that paint a revealing picture of your data... Read more
DEVONthink Pro 3.8.7 - Knowledge base, i...
DEVONthink is DEVONtechnologies' document and information management solution. It supports a large variety of file formats and stores them in a database enhanced by artificial intelligence (AI). Many... Read more
Drive Genius 6.2.3 - $79.00
Drive Genius features a comprehensive Malware Scan. Automate your malware protection. Protect your investment from any threat. The Malware Scan is part of the automated DrivePulse utility. DrivePulse... Read more
VLC Media Player 3.0.18 - Popular multim...
VLC Media Player is a highly portable multimedia player for various audio and video formats (MPEG-1, MPEG-2, MPEG-4, DivX, MP3, OGG, ...) as well as DVDs, VCDs, and various streaming protocols. It... Read more

Latest Forum Discussions

See All

TouchArcade Game of the Week: ‘Sling Min...
The world of PC games has always blown my mind because there’s just SO MUCH stuff out there that it’s not uncommon at all for there to be a game that’s well-liked and well-reviewed, and seemingly quite popular with a solid fanbase, and have it be... | Read more »
SwitchArcade Round-Up: Reviews Featuring...
Hello gentle readers, and welcome to the SwitchArcade Round-Up for December 2nd, 2022. So, today turned out a little quieter than the usual Friday. It was so quiet, in fact, that I decided to pen a few reviews. The Knight Witch, Railbound, and Donut... | Read more »
Blue Archive reveals its latest event st...
Nexon has announced the new update for Blue Archive, under the name of An Unconcealed Heart. Featuring a battle between two academies, the story will follow a group struggling to gain recognition, and will bring three new students to recruit. [... | Read more »
Dead Cells+ Is Out Now on Apple Arcade a...
Following the major update for Dead Cells on iOS and Android a few days ago, Playdigious has brought Dead Cells+ () to Apple Arcade. As an App Store Great, Dead Cells+ includes all prior paid DLC and content updates. It also has exclusive mobile... | Read more »
SwitchArcade Round-Up: ‘Romancing SaGa’,...
Hello gentle readers, and welcome to the SwitchArcade Round-Up for December 1st, 2022. Wow, December. We’re already at the last month of the year? Phew. I have a lot of work to finish in the next few weeks. As for today, we’ve got a little news, a... | Read more »
‘Railbound’ Update Now Available Adding...
One of our favorite puzzlers released this year is Railbound from Afterburn Games, which hit in early September and earned our Game of the Week recognition for being an absolutely ace logic puzzler. The goal is to place rail pieces down in order to... | Read more »
The Seven Deadly Sins: Grand Cross celeb...
Netmarble Corporation has pulled out all the stops to celebrate the 3 and a half year anniversary of The Seven Deadly Sins: Grand Cross. The Grand Cross 3.5th Year Anniversary the Ultimate One, a rather wordy title, brings with it a brand new... | Read more »
‘Skullgirls Mobile’ Major Update 5.2 Out...
Developer Hidden Variable pushed out a major update for Skullgirls Mobile (Free) a few hours ago. The version 5.2 update brings in Black Dahlia (before the console and PC game), Retakes, XP Treats, free gifts, and more. Since launch, Skullgirls... | Read more »
Out Now: ‘Disgaea 4’, ‘Romancing SaGa: M...
Each and every day new mobile games are hitting the App Store, and so each week we put together a big old list of all the best new releases of the past seven days. Back in the day the App Store would showcase the same games for a week, and then... | Read more »
SwitchArcade Round-Up: ‘Elevator Action...
Hello gentle readers, and welcome to the SwitchArcade Round-Up for November 30th, 2022. We’re finishing up the month on a quiet note, friends. There are five new releases to look at today, with a few notables amongst them. We’ve got summaries for... | Read more »

Price Scanner via MacPrices.net

New Holiday Sale: Apple retailers are offerin...
Several Apple retailers lowered prices on 10.9″ iPad Airs overnight to lows of $100 off MSRP starting at $499. Their prices are the lowest available for iPad Airs anywhere this Holiday season right... Read more
New Holiday sale at Amazon: Take $50 off Appl...
Amazon has Apple’s new 10th-generation iPads in stock and on sale, for the first time, for $50 off MSRP starting at only $399. Their discount applies to all models and all colors. With the discount,... Read more
Holiday Sale: Get an 8.3″ Apple iPad mini for...
Sams Club has 10.9″ 64GB iPad minis on Holiday sale for $80-$100 off MSRP through December 7, 2022. With their discount, prices start at $399 — the cheapest price for a new iPad mini from any of the... Read more
Sams Club Holiday December Event sale: Apple...
Apple AirPods Max headphones are on sale at Sams Club for $110 off MSRP ($439) as part of their December Event sale, ending on December 7, 2022, valid for all colors. Sale price for online orders... Read more
Apple’s 10.2″ 64GB 9th-generation iPads are o...
Sams Club has 9th-generation 64GB iPads on Holiday sale for $60 off MSRP through December 7, 2022. With their discount, prices start at $259 — the cheapest price for a new iPad from any of the Apple... Read more
11″ 128GB WiFi M2 iPad Pro on sale for $749,...
B&H Photo has the new 11″ 128GB WiFi M2-powered iPad Pro (in Space Gray or Silver) on Holiday sale for $749 including free 1-2 day shipping to most US addresses. Their price is $50 off MSRP and... Read more
Find the best Holiday sale price on an iPad u...
We’ve updated our iPad Price Trackers with the latest information on the new 10th-generation iPads, M2-powered iPad Pros, M1 iPad Airs, iPad minis, and 9th generation iPads from Apple’s authorized... Read more
Apple retailers are offering $100-$150 Holida...
Apple retailers have posted their most-recent Holiday sale prices on 13″ MacBook Airs. Take up to $150 off MSRP on M2-powered Airs with these sales with prices starting at only $1099. Free shipping... Read more
Holiday Sale: Apple’s 14″ MacBook Pros with M...
B&H Photo is offering $200-$300 discounts on Apple’s 14″ MacBook Pros with M1 Pro CPUs as part of their Holiday 2022 sale, with prices starting at $1799. Free 1-2 day shipping is available to... Read more
Deal Alert! 50% off Apple MagSafe Chargers
AT&T has Apple MagSafe Chargers on sale for 50% off MSRP as part of their Holiday sale. Service is not required to take advantage of these savings. With the discounts, their sale prices are the... Read more

Jobs Board

Support Technician II - *Apple* Support - O...
…problems and acting as a liaison between customers and resolving groups. As an Apple Technical Specialist, you will be supporting many of our popular Apple Read more
*Apple* Electronic Repair Technician - PlanI...
…a highly motivated individual to join our Production Department as an Apple Electronic Repair Technician. The computer repair technician will diagnose, assemble, Read more
Lead Developer - *Apple* tvOS - Rumble (Uni...
…earnings, and positive sentiment About the role: We are looking for a Lead Apple tvOS Developer to join our application engineering team to expand our video centric Read more
Tier 1 Endpoint Engineer - *Apple* - Red Ri...
…Desk on site, at our Client's location, with a focus on support to Apple products. This position will handle technical support requests directly from customers and Read more
Product Manager II - *Apple* - DISH (United...
…you will be doing We seek an ambitious, data-driven thinker to assist the Apple Product Development team as our new Retail Wireless division continues to grow and Read more
All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.