Jonathan Hassell

Radius

Securing Public Access to Private Resources

• Broschiertes Buch

Produktbeschreibung

The subject of security never strays far from the minds of IT workers, for good reason. If there is a network with even just one connection to another network, it needs to be secured. "RADIUS", or Remote Authentication Dial-In User Service, is a widely deployed protocol that enables companies to authenticate, authorize and account for remote users who want access to a system or service from a central network server. Originally developed for dial-up remote access, "RADIUS" is now used by virtual private network (VPN) servers, wireless access points, authenticating Ethernet switches, Digital Subscriber Line (DSL) access, and other network access types. Extensible, easy to implement, supported, and actively developed, "RADIUS" is currently the de facto standard for remote authentication. "RADIUS" provides a complete, detailed guide to the underpinnings of the "RADIUS" protocol, with particular emphasis on the utility of user accounting. Author Jonathan Hassell draws from his extensive experience in Internet service provider operations to bring practical suggestions and advice for implementing "RADIUS". He also provides instructions for using an open-source variation called "FreeRADIUS". "RADIUS is an extensible protocol that enjoys the support of a wide range of vendors," says Jonathan Hassell. "Coupled with the amazing efforts of the open source development community to extend RADIUS's capabilities to other applications-Web, calling card security, physical device security, such as RSA's SecureID-RADIUS is possibly the best protocol with which to ensure only the people that need access to a resource indeed gain that access." This book covers "RADIUS" completely, from the history and theory of the architecture around which it was designed, to how the protocol and its ancillaries function on a day-to-day basis, to implementing "RADIUS"-based security in a variety of corporate and service provider environments. If you are an ISP owner or administrator, corporate IT professional responsible for maintaining mobile user connectivity, or a web presence provider responsible for providing multiple communications resources, you'll want this book to help you master this widely implemented but little understood protocol.

Produktdetails

• Verlag: O'Reilly Media
• Seitenzahl: 206
• Erscheinungstermin: 12. November 2002
• Englisch
• Abmessung: 233mm x 179mm x 15mm
• Gewicht: 350g
• ISBN-13: 9780596003227
• ISBN-10: 0596003226
• Artikelnr.: 10685532

Autorenporträt

Jonathan Hassell is a systems administrator, IT consultant, and industry author residing in Raleigh, NC. He has extensive experience in networking technologies and Internet connectivity and currently runs his own web hosting business, Enable Hosting. He is the author of RADIUS for O'Reilly and Associates and is a columnist for WindowsITSecurity.COM and Pinnacle's Linux AppDev newsletter. He has also worked with IBM to develop a tutorial on Apache web server optimization.

Inhaltsangabe

Preface
Audience
Organization
Conventions Used in This Book
How to Contact Us
Acknowledgments
Chapter 1: An Overview of RADIUS
1.1 An Overview of AAA
1.2 Key Points About AAA Architecture
1.3 The Authorization Framework
1.4 And Now, RADIUS
Chapter 2: RADIUS Specifics
2.1 Using UDP versus TCP
2.2 Packet Formats
2.3 Packet Types
2.4 Shared Secrets
2.5 Attributes and Values
2.6 Authentication Methods
2.7 Realms
2.8 RADIUS Hints
Chapter 3: Standard RADIUS Attributes
3.1 Attribute Properties
Chapter 4: RADIUS Accounting
4.1 Key Points in RADIUS Accounting
4.2 Basic Operation
4.3 The Accounting Packet Format
4.4 Accounting Packet Types
4.5 Accounting-specific Attributes
Chapter 5: Getting Started with FreeRADIUS
5.1 Introduction to FreeRADIUS
5.2 Installing FreeRADIUS
5.3 In-depth Configuration
5.4 Troubleshooting Common Problems
Chapter 6: Advanced FreeRADIUS
6.1 Using PAM
6.2 Proxying and Realms
6.3 Using the clients.conf File
6.4 FreeRADIUS with Some NAS Gear
6.5 Using MySQL with FreeRADIUS
6.6 Simultaneous Use
6.7 Monitoring FreeRADIUS
Chapter 7: Other RADIUS Applications
7.1 RADIUS for Web Authentication
7.2 Using the LDAP Directory Service
7.3 Parsing RADIUS Accounting Files
Chapter 8: The Security of RADIUS
8.1 Vulnerabilities
8.2 The Extensible Authentication Protocol
8.3 Compensating for the Deficiencies
8.4 Modifying the RADIUS Protocol
Chapter 9: New RADIUS Developments
9.1 Interim Accounting Updates
9.2 The Apple Remote Access Protocol
9.3 The Extensible Authentication Protocol
9.4 Tunneling Protocols
9.5 New Extensions Attributes
Chapter 10: Deployment Techniques
10.1 Typical Services
10.2 RADIUS and Availability
10.3 Other Things RADIUS
Attribute Reference
Colophon

Rezensionen

"Wenn man vor der Notwendigkeit steht, sich mit diesem Protokoll etwas intensiver auseinander zu setzen, fällt auf, dass es [...] sehr wenig Literatur zu diesem Thema gibt. Um so erfreulicher ist es dann aber, dass dieser Titel von O'Reilly auch schon völlig ausreicht und (fast) alles bietet, was man wissen muss. [...]

Mir hat das Buch bei der Einarbeitung in das Thema RADIUS sehr geholfen. Besonders gut finde ich die Darstellung der Architektur und die Einführung in die RADIUS-Datenpakete mit ihrem Aufbau und ihren Attributen. Dieses zusammen gibt das notwendige Rüstzeug, um RADIUS zu verstehen und ist Grundlage für die weitere Beschäftigung. Für diesen Grundlagenteil als Note eine glatte "1" (sehr gut). [...]

Der Ausblick auf "neuere Entwicklungen" und den geplanten Nachfolger DIAMETER ("DIAMETER: twice as good as RADIUS") runden das Werk wunderbar ab und bilden das Gegenstück zur kurzen geschichtlichen Einleitung am Anfang des Buches.

[...]

Insgesamt kann ich RADIUS - Securing Public Access to Private Ressources von Jonathan Hassell nur jedem wärmstens empfehlen, der sich näher mit dem Thema beschäftigen will (oder muss)." - Helmut Elschner, http://hitforum.de 05/2005