Project

General

Profile

Actions

Feature #2323

closed

RADIUS support for mod_auth for 1.4.x

Added by codehero over 13 years ago. Updated almost 6 years ago.

Status:
Duplicate
Priority:
Low
Category:
mod_auth
Target version:
ASK QUESTIONS IN Forums:

Description

Hi,
Would it be possible (or impossible) to add RADIUS support to mod_auth? What kind of effort would be involved?


Related issues 1 (0 open1 closed)

Related to Feature #688: auth via pamFixedActions
Actions #1

Updated by gstrauss over 8 years ago

  • Status changed from New to Need Feedback
  • Priority changed from Normal to Low

Would it be possible (or impossible) to add RADIUS support to mod_auth? What kind of effort would be involved?

Yes, it is possible, but not a priority unless someone is willing to fund it, or to provide the patches to do it.

As for effort, a prototype could probably be done in a day or two, but proper support and testing against multiple RADIUS servers and integration environments would likely take one to two weeks.

Actions #2

Updated by sebastien.jeffroy.cxr about 8 years ago

Hi gstrauss,
I would like to add this feature in my products.
Can you contact me by email?
Best Regards

Actions #3

Updated by gstrauss over 7 years ago

User dreadbit suggested using the (new) mod_authn_mysql as a workaround to access the MySQL database behind his FreeRADIUS server. See https://redmine.lighttpd.net/boards/2/topics/7433

Actions #4

Updated by zzzupik about 7 years ago

Hi,
would it be possible to add RADIUS support? How much would it cost? We would like to have this feature in our product.
Can you contact me by email?
Best Regards

Actions #5

Updated by gstrauss about 7 years ago

@zzzupik, yes, it is possible and would be much more likely to happen with someone sponsoring the feature. I had rewritten the mod_auth framework last year with the idea in mind to make it more straightforward, or at least more isolated, to add other auth providers, including RADIUS.

I can't see your email address on this forum, so please send an email to me (see https://github.com/gstrauss for my contact info). Thanks.
(or find my email in lighttpd commit logs if you pull down the git repo)

Actions #6

Updated by awehrmann about 7 years ago

Hi,
I just wanted to throw in my 2 cents here.
Would PAM support not be more sensible here?
That way you would not only be able to use RADIUS (by using the pam_radius_auth module)
but also any other authentication mechanism that's available via PAM.

Actions #7

Updated by gstrauss almost 6 years ago

Actions #8

Updated by gstrauss almost 6 years ago

  • Status changed from Need Feedback to Duplicate

mod_authn_pam was released in lighttpd 1.4.51. See #688 for discussion and limitations (e.g. it is blocking)
Marking this issue as a duplicate of #688 since RADIUS support can be obtained through mod_authn_pam, and configuring PAM to use RADIUS.

While a couple people did contact me about their companies sponsoring a native mod_authn_radius, neither could get buy-in from their management to actually fund its development.

Actions

Also available in: Atom