Uploaded image for project: 'Observium'
  1. Observium
  2. OBS-1047

RADIUS authentication module improvements

    XMLWordPrintable

Details

    Description

      Current RADIUS Web-interface authentication scheme lacks support of user-level authorization, all users are granted privilege 10, the maximum one.

      Attached file, `radius.inc.php.patch`, containing full replacement for `radius_authenticate` and `radius_auth_user_level` functions. These functions now allow to use RADIUS-IETF attribute Class (attr. #25) to be used for assigning privilege levels to users in the web interface. My setup now uses these functions to assign either privilege 1 or 10 to users and seems to work fine. If you'll find this addition useful, please add it to Observium code. Or maybe you'll find essential to make new variable, like `$config['auth_radius_auth_level_attr']` for users to be able to choose attr. #, affordable for them and not just attr. #25.

      Attachments

        1. radius.inc.php.patch
          0.8 kB
          Sergei Fomin
        2. radius.inc.php.patch.2014-10-27
          0.9 kB
          Sergei Fomin

        Activity

          People

            landy Mike Stupalov
            j-v-c Sergei Fomin
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: