安装Mariadb
yum install -y mariadb-server mariadb systemctl start mariadb systemctl enable mariadb
- 初始设置MariaDB,设置root密码,出于安全考虑,考虑删除匿名用户和禁用远程根登录,参见下面的示例配置。
mysql_secure_installation
Set root password? [Y/n] y New password: Re-enter new password: Password updated successfully! Reloading privilege tables.. ... Success! Remove anonymous users? [Y/n] y Disallow root login remotely? [Y/n] y Remove test database and access to it? [Y/n] y Reload privilege tables now? [Y/n] y
- 创建Radius数据库和用户名密码
# mysql -u root -p MariaDB [(none)]> CREATE DATABASE radius; MariaDB [(none)]> GRANT ALL ON radius.* TO radius@localhost IDENTIFIED BY "radius"; MariaDB [(none)]> FLUSH PRIVILEGES; MariaDB [(none)]> exit
安装FreeRadius
yum -y install freeradius freeradius-utils freeradius-mysql systemctl start radiusd.service systemctl enable radiusd.service
查看Radius使用的端口,然后添加Radius服务到防火墙中;
cat /usr/lib/firewalld/services/radius.xml
查看防火墙状态,启动状态才能添加规则,centos7中默认防火墙就是firewalld,一般不需要额外设置。
firewall-cmd --state
firewall-cmd --add-service=radius --permanent
success
firewall-cmd --reload
success
firewall-cmd --list-services
radius
安装FreeRADIUS管理界面Daloradius
yum -y install wget unzip zip cd /var/www/html/ wget https://github.com/lirantal/daloradius/archive/master.zip unzip master.zip wget http://liquidtelecom.dl.sourceforge.net/project/daloradius/daloradius/daloradius0.9-9/daloradius-0.9-9.tar.gz unzip master.zip mv daloradius-master/ daloradius mv daloradius-master/ daloradius cd daloradius mysql -u root -p radius < contrib/db/fr2-mysql-daloradius-and-freeradius.sql mysql -u root -p radius < contrib/db/mysql-daloradius.sql chown -R apache:apache /var/www/html/daloradius/ chmod 664 /var/www/html/daloradius/library/daloradius.conf.php
- 下载daloradius-0.9-9.tar.gz,解压后合并到daloradius文件夹中
- 设置daloradius数据库连接信息,打开daloradius.conf.php文件,修改CONFIG_DB_USER,CONFIG_DB_PASS,CONFIG_DB_NAME。
vim /var/www/html/daloradius/library/daloradius.conf.php
systemctl restart radiusd.service # systemctl restart mariadb.service # systemctl restart httpd
如果提示:Warning: radiusd.service changed on disk. Run ‘systemctl daemon-reload’ to reload units.
![这里写图片描述]!
没有上面提示就忽略此步
# systemctl daemon-reload
# systemctl restart radiusd.service
- 安装php-pear
# yum install php-pear
# pear install DB
登录web界面
默认用户名: administrator
密码: radius
http://ip-address/daloradius/login.php
至此FreeRadius+Daloradius+web管理界面已经安装成功,下面是web界面汉化教程。无需求的可不看。