topic Radius Authentication using Perl Radius:: in Operating System - OpenVMS

Radius Authentication using Perl Radius::

James T Horn — Thu, 22 May 2008 19:00:52 GMT

Does anyone have an example of using Perl module Radius:: for authentication? Where would the /etc/radius/dictionary in an openvms environment?

Re: Radius Authentication using Perl Radius::

Ian Miller. — Thu, 22 May 2008 19:12:07 GMT

Why not use a native RADIUS server for VMS?

http://starlet.deltatel.ru/radiusvms/
OR
http://www.opus1.com/o/software_radius.html

Re: Radius Authentication using Perl Radius::

James T Horn — Thu, 22 May 2008 19:20:47 GMT

We need a perl script to use Radius:: calls to authenticate to a radius server. The Radius:: calls need to reference a dictionary file that I am thinking would be from a radius server.

Re: Radius Authentication using Perl Radius::

Hoff — Fri, 23 May 2008 01:53:57 GMT

There's no Radius server nor Radius client built into OpenVMS, so there will be no Radius configuration files present, such as the requested /etc/radius/dictionary file.

OpenVMS itself is completely different than OpenVMS, so the files found in /etc and other such Unix directories does not generally exist, or exists elsewhere, or else-different. (You can see some of these Unix directories implemented inside the separately-installed GNV environment, and C will translate some common Unix specifications into OpenVMS equivalents, but -- in general -- you won't most Unix directories present.)

Now as to where Ruslan put that configuration file (or whatever the analogous file) when he ported Radius over to OpenVMS, I don't know. But there's undoubtedly an analog. Pull down the kit and install it and have a look.

In other words, you'll need to install the Radius server, look around, and port over the Perl module.

Or use LDAP and external authentication or other such mechanism, depending on exactly what you're up to. Or use a Perl tie-in into LDAP, etc.

Re: Radius Authentication using Perl Radius::

Craig A Berry — Fri, 23 May 2008 02:55:26 GMT

Poking around in the Net::Radius namespace here:

http://search.cpan.org/src/LUISMUNOZ/Net-Radius-1.56/

I see a directory full of examples and another directory full of dictionaries. I do not see offhand anything that looks especially OS-specific and this is a pure-Perl module -- no interfaces to C modules.

I guess the answer to where the dictionary is might be where do you want it to be and / or where has your Radius installation already put it.

Re: Radius Authentication using Perl Radius::

Ruslan R. Laishev — Tue, 03 Jun 2008 12:47:24 GMT

Hello, James!

As I understand you need a PERL stuff to performs an authentication against RADIUS?

U don't need a dictionary and other RADIUS related stuff, just form an UDP packet with 2 attributes: Username & Password, it's a two screen of code maximum (include retransmits and answer checking/validating).

You can use as examples:

http://starlet.deltatel.ru/~laishev/aaa-vms/pmas_radius.c

or

http://starlet.deltatel.ru/~laishev/aaa-vms/lgi$callout_radius.c