]>
Commit | Line | Data |
---|---|---|
5a48ed18 | 1 | .TH basic_radius_auth 8 "7 August 2004" "Squid RADIUS Auth" |
d80aac12 | 2 | . |
3 | .SH NAME | |
5a48ed18 | 4 | basic_radius_auth - Squid RADIUS authentication helper |
d80aac12 | 5 | . |
6 | .SH SYNOPSIS | |
8c2b74bc AJ |
7 | .if !'po4a'hide' .B basic_radius_auth |
8 | .if !'po4a'hide' -f configfile | |
d80aac12 | 9 | .br |
8c2b74bc AJ |
10 | .if !'po4a'hide' .B basic_radius_auth |
11 | .if !'po4a'hide' -h "server" [-p port] [-i identifier] -w secret | |
d80aac12 | 12 | . |
13 | .SH DESCRIPTION | |
14 | This helper allows Squid to connect to a RADIUS server to | |
15 | validate the user name and password of Basic HTTP authentication. | |
16 | . | |
17 | .TP | |
8c2b74bc | 18 | .if !'po4a'hide' .BI "-f " "configfile " |
d80aac12 | 19 | Specifies the path to a configuration file. See the CONFIGURATION section |
20 | for details. | |
21 | . | |
22 | .TP | |
8c2b74bc | 23 | .if !'po4a'hide' .BI "-h " server |
d80aac12 | 24 | Alternative method of specifying the server to connect to |
25 | . | |
26 | .TP | |
8c2b74bc | 27 | .if !'po4a'hide' .BI "-p " port |
d80aac12 | 28 | Specify another server port where the RADIUS server listens for requests |
29 | if different from the default RADIUS port. Normally not specified. | |
30 | . | |
31 | .TP | |
8c2b74bc | 32 | .if !'po4a'hide' .BI "-i " identifier |
d80aac12 | 33 | Unique identifier identifying this Squid proxy to the RADIUS server. |
34 | If not specified the IP address is used as to identify the proxy. | |
35 | .TP | |
8c2b74bc | 36 | .if !'po4a'hide' .BI "-w " secret |
d80aac12 | 37 | Alternative method of specifying the shared secret. Using the |
38 | configuration file is generally more secure and recommended. | |
39 | . | |
40 | .TP | |
8c2b74bc | 41 | .if !'po4a'hide' .BI "-t " timeout |
d80aac12 | 42 | RADIUS request timeout. Default 10 seconds. |
43 | . | |
44 | .SH CONFIGURATION | |
45 | The configuration specifies how the helper connects to RADIUS. | |
46 | The file contains a list of directives (one per line). Lines | |
47 | beginning with a # is ignored. | |
48 | . | |
49 | .TP | |
8c2b74bc | 50 | .if !'po4a'hide' .BI "server " radiusserver |
d80aac12 | 51 | specifies the name or address of the RADIUS server to connect to. |
52 | . | |
53 | .TP | |
8c2b74bc | 54 | .if !'po4a'hide' .BI "secret " somesecretstring |
d80aac12 | 55 | specifies the shared RADIUS secret. |
56 | . | |
57 | .TP | |
8c2b74bc | 58 | .if !'po4a'hide' .BI "identifier " nameofserver |
5a48ed18 | 59 | specifies what the proxy should identify itself as to the RADIUS server. |
d80aac12 | 60 | This directive is optional. |
61 | . | |
62 | .TP | |
8c2b74bc | 63 | .if !'po4a'hide' .BI "port " portnumber |
d80aac12 | 64 | Specifies the port number or service name where the helper should connect. |
65 | .SH AUTHOR | |
8c2b74bc AJ |
66 | This program is written by |
67 | .if !'po4a'hide' .I Marc van Selm <selm@cistron.nl> | |
68 | ||
69 | With contributions from | |
d80aac12 | 70 | .I Henrik Nordstrom <hno@squid-cache.org> |
8c2b74bc AJ |
71 | and many others. |
72 | . | |
73 | This manual was written by | |
74 | .if !'po4a'hide' .I Henrik Nordstrom <hno@squid-cache.org> | |
d80aac12 | 75 | . |
76 | .SH QUESTIONS | |
8c2b74bc AJ |
77 | Questions on the usage of this program can be sent to the |
78 | .I Squid Users mailing list | |
79 | .if !'po4a'hide' <squid-users@squid-cache.org> | |
d80aac12 | 80 | or to your favorite RADIUS list/friend if the question is more related to |
81 | RADIUS than Squid. | |
82 | . | |
83 | .SH REPORTING BUGS | |
8c2b74bc AJ |
84 | Report bugs or bug fixes using http://bugs.squid-cache.org/ |
85 | . | |
86 | Report serious security bugs to | |
d80aac12 | 87 | .I Squid Bugs <squid-bugs@squid-cache.org> |
8c2b74bc AJ |
88 | . |
89 | Report ideas for new improvements to the | |
90 | .I Squid Developers mailing list | |
91 | .if !'po4a'hide' <squid-dev@squid-cache.org> | |
d80aac12 | 92 | . |
93 | .SH "SEE ALSO" | |
94 | .BR RFC2058 " - Remote Authentication Dial In User Service (RADIUS)" |