usage

The Radius module is not integrated into the PAM-framework, but serves as a standalone module. Configuration informations are store in /etc/raddb/server:

#

# server[:port] shared_secret timeout (s)

#

192.168.33.7 a_secret_word 1

#

#

Lines starting with a # are treated as comments. A server is described by its IP address (probably followed by an optional port), a secret string that the radius server and client share and a timeout value.

When defining CHAP usage within the ppp options file (see man page for details), the ppp daemon contacts the specified radius server in a round-robin fashion until a successful login has been granted or all servers has denied access.