TweetFollow Us on Twitter

Using the RADIUS Service in OS X 10.5

Volume Number: 23 (2007)
Issue Number: 11
Column Tag: Networking

Using the RADIUS Service in OS X 10.5

Aimed at Airports, but flexible under the hood

By Ben Greisler

Why RADIUS?

Controlling access to your wireless network has just become easier with the inclusion of RADIUS services in Leopard Server. Providing a central method for controlling user access to Airport access points (and other RADIUS capable devices), the Leopard implementation is Apple simple.

RADIUS Services in Leopard 10.5

Setting up RADIUS in Leopard server is very straightforward. You can either use the wizard or manually set it up manually. Normally I would say that using a wizard is the easy method, but in this case even the manual method is very simple to follow. Regardless of the method, you will end up with a working set up.

In my test environment I set up an Airport Extreme (round) and configured it to bridge. This has nothing to do with the RADIUS setup, but will be similar to how other will be using it. I had a working OD master on my network and I set up a group of users authorized to connect to the wireless network. I then bound my Leopard server to the OD and checked that I could recognize OD users from the Leopard machine. The RADIUS services can be set using SACL's (Service ACL's) making it very flexible from an authorization standpoint. Once that was set I was able to start the RADIUS configuration.


Fig. 1. Activating the RADIUS service in Server Admin

Wizard Method:

Open Server Admin and activate the RADIUS service in Settings/Services. This will make the RADIUS service available in the services list.

In the RADIUS service Overview pane, click the "Configure RADIUS Service..." button.


Fig. 2. RADIUS Service Overview pane

The first page lets you chose what certificate you want to use. You can pick an existing certificate or create a self signed certificate.


Fig. 3. Pick your certificate or make your own

With your Airports up and running, you should see them in the Add Base Stations page. Pick the ones you want to use RADIUS with and fill in the Airports administrative password, then click "Add." Once the base stations have populated the Selected Base Stations window, click "Continue."


Fig. 4. Select the Airports you want authorized via RADIUS

The next window allows you set up who will be authorized to connect to the wireless network. We had set up an Open Directory group named "radiususers" in this example and selected it.


Fig. 5. Pick your group to limit users or allow all users

In the next windows, much like the final steps of configuring an OSX Server, you are given the opportunity to do a final check of your RADIUS configuration.


Fig. 6. Check your settings and commit them

The final window simply announces the successful configuration of RADIUS services.


Fig. 7. Success! Start logging in!

Manual Method:

Open Server Admin and activate the RADIUS service in Settings/Services. This will make the RADIUS service available in the services list.

In the RADIUS service Settings pane, we need to configure our certificates. If you choose a custom configuration you will be presented with you choices of where the certificates reside and a quick link to the Certificate Management page.


Fig. 8. RADIUS settings page


Fig. 9. Certificate locations


Fig. 10. Certificate management

The RADIUS settings page has an "Edit Allowed Users..." button bringing you to the SACL's page where you can define which groups can be authorized.


Fig. 11. When defining an authorized group, you can use any method of building the groups for maximum utility such as nesting


Fig. 12. The Base Stations window gives you the tools to manage your access points

In the Base Stations window you can browse for Airports or add them manually.

When browsing for Airports, you simply pick the devices you want, type in the administrator password for the device and the RADIUS service does the rest. It will communicate with the Airport, define a random shared secret and restart the Airport.


Fig. 13. Browsing for Airports


Fig. 14. If we now look at the Aiport in the AirPort Utility we can see that the RADIUS configuration has been set for us

If we pick the "Add" button, we are able to directly configure an Airport. It won't be as easy, but it is necessary for Airports not visible while browsing. You will also need to manually configure the Airport in the AirPort Utility with the shared secret. You could also set up non-Airport devices using this method.


Fig. 15. Configuring the Airport manually

To ease the rollout to Mac clients, you can export an Internet Connect plist. Click on the "Save Internet Connect File" button.


Fig. 16. Exporting the Internet Connect file


Fig. 17. With everything else configured we can get our clients connecting


Fig. 18. The user experience when connecting to a RADIUS controlled Airport

Command Line:

RADIUS in Leopard is based on FreeRADIUS and is configurable via command line. Visit the man page for details:

leoserver:~ leoadmin$ man radiusd

Take particular note of the ordering of the radius.conf contents if you decide to modify it directly. A change of ordering can make the server not work any more. This is noted in the man page and is worth repeating.

If you want to examine the files that make RADIUS work, go to /etc/raddb. Logs live at /var/log/radius/radius.log.

Conclusion

RADIUS services in Leopard server is a great addition to the set of tool Apple has given us. While Apple's implementation is really aimed at Apple Airport users, it should also work with other devices.


Ben has been everything from a Mac user to CTO of one of the leading Macintosh professional services firms. Besides writing an occasional article for MacTech, you can find him presenting at Macworld (including a session called "DNS: Demystified, co-presented with Doug Hanley) or consulting with clients around the world. You can reach him at ben@greisler.org.

 

Community Search:
MacTech Search:

Software Updates via MacUpdate

Navicat Premium Essentials 12.1.25 - Pro...
Navicat Premium Essentials is a compact version of Navicat which provides basic and necessary features you will need to perform simple administration on a database. It supports the latest features... Read more
Sketch 58 - Design app for UX/UI for iOS...
Sketch is an innovative and fresh look at vector drawing. Its intentionally minimalist design is based upon a drawing space of unlimited size and layers, free of palettes, panels, menus, windows, and... Read more
ClipGrab 3.8.5 - Download videos from Yo...
ClipGrab is a free downloader and converter for YouTube, Vimeo, Facebook and many other online video sites. It converts downloaded videos to MPEG4, MP3 or other formats in just one easy step Version... Read more
Dash 4.6.6 - Instant search and offline...
Dash is an API documentation browser and code snippet manager. Dash helps you store snippets of code, as well as instantly search and browse documentation for almost any API you might use (for a full... Read more
FotoMagico 5.6.8 - Powerful slideshow cr...
FotoMagico lets you create professional slideshows from your photos and music with just a few, simple mouse clicks. It sports a very clean and intuitive yet powerful user interface. High image... Read more
Civilization VI 1.2.4 - Next iteration o...
Sid Meier’s Civilization VI is the next entry in the popular Civilization franchise. Originally created by legendary game designer Sid Meier, Civilization is a strategy game in which you attempt to... Read more
Skype 8.52.0.138 - Voice-over-internet p...
Skype allows you to talk to friends, family and co-workers across the Internet without the inconvenience of long distance telephone charges. Using peer-to-peer data transmission technology, Skype... Read more
Bookends 13.2.6 - Reference management a...
Bookends is a full-featured bibliography/reference and information-management system for students and professionals. Bookends uses the cloud to sync reference libraries on all the Macs you use.... Read more
BusyContacts 1.4.0 - Fast, efficient con...
BusyContacts is a contact manager for OS X that makes creating, finding, and managing contacts faster and more efficient. It brings to contact management the same power, flexibility, and sharing... Read more
Chromium 77.0.3865.75 - Fast and stable...
Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all Internet users to experience the web. Version 77.0.3865.75: A list of changes is available... Read more

Latest Forum Discussions

See All

Yoozoo Games launches Saint Seiya Awaken...
If you’re into your anime, you’ve probably seen or heard of Saint Seiya. Based on a shonen manga by Masami Kurumada, the series was massively popular in the 1980s – especially in its native Japan. Since then, it’s grown into a franchise of all... | Read more »
Five Nights at Freddy's AR: Special...
Five Nights at Freddy's AR: Special Delivery is a terrifying new nightmare from developer Illumix. Last week, FNAF fans were sent into a frenzy by a short teaser for what we now know to be Special Delivery. Those in the comments were quick to... | Read more »
Rush Rally 3's new live events are...
Last week, Rush Rally 3 got updated with live events, and it’s one of the best things to happen to racing games on mobile. Prior to this update, the game already had multiplayer, but live events are more convenient in the sense that it’s somewhat... | Read more »
Why your free-to-play racer sucks
It’s been this way for a while now, but playing Hot Wheels Infinite Loop really highlights a big issue with free-to-play mobile racing games: They suck. It doesn’t matter if you’re trying going for realism, cart racing, or arcade nonsense, they’re... | Read more »
Steam Link Spotlight - The Banner Saga 3
Steam Link Spotlight is a new feature where we take a look at PC games that play exceptionally well using the Steam Link app. Our last entry talked about Terry Cavanaugh’s incredible Dicey Dungeons. Read about how it’s a great mobile experience... | Read more »
PSA: GRIS has some issues
You may or may not have seen that Devolver Digital just released GRIS on the App Store, but we wanted to do a quick public service announcement to say that you might not want to hop on buying it just yet. The puzzle platformer has come to small... | Read more »
Combo Quest (Games)
Combo Quest 1.0 Device: iOS Universal Category: Games Price: $.99, Version: 1.0 (iTunes) Description: Combo Quest is an epic, time tap role-playing adventure. In this unique masterpiece, you are a knight on a heroic quest to retrieve... | Read more »
Hero Emblems (Games)
Hero Emblems 1.0 Device: iOS Universal Category: Games Price: $2.99, Version: 1.0 (iTunes) Description: ** 25% OFF for a limited time to celebrate the release ** ** Note for iPhone 6 user: If it doesn't run fullscreen on your device... | Read more »
Puzzle Blitz (Games)
Puzzle Blitz 1.0 Device: iOS Universal Category: Games Price: $1.99, Version: 1.0 (iTunes) Description: Puzzle Blitz is a frantic puzzle solving race against the clock! Solve as many puzzles as you can, before time runs out! You have... | Read more »
Sky Patrol (Games)
Sky Patrol 1.0.1 Device: iOS Universal Category: Games Price: $1.99, Version: 1.0.1 (iTunes) Description: 'Strategic Twist On The Classic Shooter Genre' - Indie Game Mag... | Read more »

Price Scanner via MacPrices.net

Preorder your Apple Watch Series 5 today at A...
Amazon has Apple Watch Series 5 GPS models available for preorder and on sale today for $15 off Apple’s MSRP. Shipping is free and starts on September 20th: – 40mm Apple Watch Series 5 GPS: $384.99 $... Read more
21″ iMacs on sale for $100 off Apple’s MSRP,...
B&H Photo has new 21″ Apple iMacs on sale for $100 off MSRP with models available starting at $999. These are the same iMacs offered by Apple in their retail and online stores. Overnight shipping... Read more
2018 4 and 6-Core Mac minis on sale today for...
Apple resellers are offering new 2018 4-Core and 6-Core Mac minis for $100-$150 off MSRP for a limited time. B&H Photo has the new 2018 4-Core and 6-Core Mac minis on sale for up to $150 off... Read more
Save $150-$250 on 10.2″ WiFi + Cellular iPads...
Verizon is offering $150-$250 discounts on Apple’s new 10.2″ WiFi + Cellular iPad with service. Buy the iPad itself and save $150. Save $250 on the purchase of an iPad along with an iPhone. The fine... Read more
Apple continues to offer 13″ 2.3GHz Dual-Core...
Apple has Certified Refurbished 2017 13″ 2.3GHz Dual-Core non-Touch Bar MacBook Pros available starting at $1019. An standard Apple one-year warranty is included with each model, outer cases are new... Read more
Apple restocks 2018 MacBook Airs, Certified R...
Apple has restocked Certified Refurbished 2018 13″ MacBook Airs starting at only $849. Each MacBook features a new outer case, comes with a standard Apple one-year warranty, and is shipped free. The... Read more
Sunday Sale! 2019 27″ 5K 6-Core iMacs for $20...
B&H Photo has the new 2019 27″ 5K 6-Core iMacs on stock today and on sale for up to $250 off Apple’s MSRP. Overnight shipping is free to many locations in the US. These are the same iMacs sold by... Read more
Weekend Sale! 2019 13″ MacBook Airs for $200...
Amazon has new 2019 13″ MacBook Airs on sale for $200 off Apple’s MSRP, with prices starting at $899, each including free shipping. Be sure to select Amazon as the seller during checkout, rather than... Read more
2019 15″ MacBook Pros now on sale for $350-$4...
B&H Photo has Apple’s 2019 15″ 6-Core and 8-Core MacBook Pros on sale today for $350-$400 off MSRP, starting at $2049, with free overnight shipping available to many addresses in the US: – 2019... Read more
Buy one Apple Watch Series 5 at Verizon, get...
Buy one Apple Watch Series 5 at Verizon, and get a second Watch for 50% off. Plus save $10 on your first month of service. The fine print: “Buy Apple Watch, get another up to 50% off on us. Plus $10... Read more

Jobs Board

*Apple* Mobility Pro-Store 149 - Best Buy (U...
**731985BR** **Job Title:** Apple Mobility Pro-Store 149 **Job Category:** Store Associates **Location Number:** 000149-Towson-Store **Job Description:** At Best Read more
Student Employment (Blue *Apple* Cafe) Spri...
Student Employment (Blue Apple Cafe) Spring 2019 Penn State University Campus/Location: Penn State Brandywine Campus City: Media, PA Date Announced: 12/20/2018 Date Read more
Windows/ *Apple* Technical Support Engineer...
Windows/ Apple Technical Support Engineer McLean , VA , US Apply + Be you + Be Booz Allen + Be empowered + Learn More Job Description Location: McLean, VA, US Job Read more
*Apple* Mobile Master - Best Buy (United Sta...
**725617BR** **Job Title:** Apple Mobile Master **Job Category:** Store Associates **Location Number:** 001095-Chesterfield-Store **Job Description:** **What does a Read more
Geek Squad *Apple* Master Consultation Agen...
**732415BR** **Job Title:** Geek Squad Apple Master Consultation Agent **Job Category:** Services/Installation/Repair **Location Number:** 000425-Hickory-Store **Job Read more
All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.