Radius
There's far more to information security than usernames and passwords; it's not just a matter of letting legitimate users "in" and keeping bad guys "out." Users who have authority to use certain parts of a system may not be authorized to see everything, and businesses, for billing purposes, often want to track how long users spend in a system. The Remote Access Dial-In User Service (RADIUS) solves all of these engineering challenges, but you have to implement it correctly in order to achieve maximum benefit and keep your systems safe.RADIUSprovides an architectural and technical guide to RADIUS implementation, enabling its readers to design RADIUS-secured systems properly and choose products wisely.Jonathan Hassell's approach is to lay down a foundation of RADIUS protocol theory, then explain how to implement the protocol with a particular product (FreeRADIUS for Linux). He approaches both elements of his book with precision and detail, and provides plenty of tabular information for reference. He's also liberal with examples, which is a welcome trait if you're in a hurry to know how to format a radiusd.conf file or how to configure Cisco IOS to do RADIUS authentication. This is a comprehensive treatment of a complicated subject.--David WallTopics covered:How the RADIUS protocol provides authentication, authorization, and accounting (AAA services), and how it fits with other elements of network design. The author covers the protocol in theory before digging into its implementation in FreeRADIUS for Linux and the integration of that package with several important networking products.