PPPD-RADIUS(8)

📦
version 2.5.5 · 4 versions
, in alpine 3.22, alpine 3.23, alpine 3.24, arch rolling, debian trixie, nixos 26.05, nixpkgs unstable, opensuse-leap 16.0, ubuntu questing, ubuntu resolute, ubuntu stonking

✨ PPPD-RADIUS ✨

okay bestie, welcome to the pppd-radius page from the System Manager's Manual 💅 this is the whole vibe of the RADIUS authentication plugin for pppd, and yes we're doing this line by line, no skipping, no cap 🫶

🎀 NAME 🎀

radius.so — the RADIUS authentication plugin for pppd(8), periodt ✨

🌸 SYNOPSIS 🌸

pppd [ options ] plugin radius.so

that's it, that's the whole summoning ritual 🔥

🦋 DESCRIPTION 🦋

so the RADIUS plugin for pppd lets pppd do PAP, CHAP, MS-CHAP and MS-CHAPv2 authentication against a RADIUS server instead of the usual /etc/ppp/pap-secrets and /etc/ppp/chap-secrets files. literally swapping out the whole secrets-file situation for a whole server, iconic behavior 👑

the RADIUS plugin is built on a library called radiusclient, which has its own configuration files (usually in /etc/radiusclient) — so go consult those files for more info on configuring the RADIUS plugin, bestie, they're the ones holding the lore 📚

💖 OPTIONS 💖

the RADIUS plugin introduces one additional pppd option (and then, well, keeps going 🙈). here's everything:

  • radius-config-file filename — the file filename is taken as the radiusclient configuration file. and if you don't use this option at all? then the plugin uses /etc/radiusclient/radiusclient.conf as the configuration file. default behavior, she's always there for you 💅
  • avpair attribute=value — adds an Attribute-Value pair to be passed on to the RADIUS server on every single request. every. one. ⭐
  • map-to-ifname — sets the Radius NAS-Port attribute to a number equal to the interface name (Default) 👑
  • map-to-ttyname — sets the Radius NAS-Port attribute value via the libradiusclient library 🧚

🌈 USAGE 🌈

to use the plugin, simply supply the plugin radius.so option to pppd, and edit /etc/radiusclient/radiusclient.conf appropriately. easy. slay. ✨

and here's the big one: if you use the RADIUS plugin, the normal pppd authentication schemes (login, checking the /etc/ppp/*-secrets files) are skipped. not downgraded, not partially used — skipped, fr fr 💀

the RADIUS server should assign an IP address to the peer using the RADIUS Framed-IP-Address attribute 🫶

👑 SEE ALSO 👑

go read those too, iykyk 📖

💜 AUTHOR 💜

Dianne Skoll <dianne@skoll.ca> — thank you queen, we appreciate you 🌸

k that's the whole page bestie!! this was PPPD-RADIUS(8) from the System Manager's Manual, and if you ever need to find her again, that's exactly where she lives 💖 bye ily, go authenticate something responsibly 🎀✨
📦 where this page comes from