Hi, Im just getting started with freeradius (trying to nut out dynamic vlans atm) and I was wondering if this book would be a worth while purchase. I had a great experience with O'reillys bind and perl cookbook books. Have any FR users used this book and if so your comments would be appreciated. http://www.oreilly.com/catalog/radius/index.html
Jacob Jarick wrote:
Hi, Im just getting started with freeradius (trying to nut out dynamic vlans atm) and I was wondering if this book would be a worth while purchase.
Maybe.
I had a great experience with O'reillys bind and perl cookbook books. Have any FR users used this book and if so your comments would be appreciated.
I reviewed the book before it was published. It's still linked to from freeradius.org. If you know nothing about RADIUS, it's worth buying. But 1/3 is pretty much paraphrased from the RFC's, and 1/3 is paraphrased from old FreeRADIUS documentation. If you're familiar with RADIUS, it will contain little useful information. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Alan DeKok wrote:
Jacob Jarick wrote:
Hi, Im just getting started with freeradius (trying to nut out dynamic vlans atm) and I was wondering if this book would be a worth while purchase.
Maybe.
I had a great experience with O'reillys bind and perl cookbook books. Have any FR users used this book and if so your comments would be appreciated.
I reviewed the book before it was published. It's still linked to from freeradius.org.
If you know nothing about RADIUS, it's worth buying. But 1/3 is pretty much paraphrased from the RFC's, and 1/3 is paraphrased from old FreeRADIUS documentation.
If you're familiar with RADIUS, it will contain little useful information.
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I just got this one http://books.theregister.co.uk/catalog/browse.asp?id=746814&group=9880&subca... Initial flickings through, suggest it's quite indepth . --- Arran
Arran Cudbard-Bell wrote:
I just got this one http://books.theregister.co.uk/catalog/browse.asp?id=746814&group=9880&subca...
Initial flickings through, suggest it's quite indepth .
I've seen that. It has 300+ pages, and 40 pages on RADIUS. I had a hard time reading it, to be honest. Long paragraphs, long sentences, convoluted explanations. If you're looking for a "howto" book, the O'Reilly book is *much* more suited to that purpose. If you're looking for a book that gives you an overview of ongoing research in AAA, the Wiley book is good. If you're looking for concepts that aren't covered anywhere else, my book (when I'm eventually done) will do that. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Alan DeKok wrote:
Arran Cudbard-Bell wrote:
I just got this one http://books.theregister.co.uk/catalog/browse.asp?id=746814&group=9880&subca...
Initial flickings through, suggest it's quite indepth .
I've seen that. It has 300+ pages, and 40 pages on RADIUS. I had a hard time reading it, to be honest. Long paragraphs, long sentences, convoluted explanations.
If you're looking for a "howto" book, the O'Reilly book is *much* more suited to that purpose. If you're looking for a book that gives you an overview of ongoing research in AAA, the Wiley book is good.
If you're looking for concepts that aren't covered anywhere else, my book (when I'm eventually done) will do that.
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Yes, they're generally pretty good for that. What put me off the O'Rielly book was it's age.. Although I only started using FreeRADIUS with 1.1.4 , i've seen pretty rapid development. So I was concerned about how much relevance a book published in 2002 has today. There are also amazingly useful, mostly undocumented features like SQL Xlat, which won't be covered anywhere except the mailing list archives. But I guess for theory reference books are still pretty good :) Oh Btw on a completely unrelated subject, if you fix the 'Use Client-Ip-Address/ Packet-Src-IP-Address attribute as a check item' then I can push the CVS head out live and give you some proper feedback ;) -- Arran Cudbard-Bell (ac221@sussex.ac.uk) Authentication Authorisation & Accounting Officer Infrastructure Services | ENG1 FF08 EXT:3900
Arran Cudbard-Bell wrote:
What put me off the O'Rielly book was it's age.. Although I only started using FreeRADIUS with 1.1.4 , i've seen pretty rapid development. So I was concerned about how much relevance a book published in 2002 has today.
It covers RADIUS. It's good for people who are completely new to RADIUS.
There are also amazingly useful, mostly undocumented features like SQL Xlat, which won't be covered anywhere except the mailing list archives.
As always, patches are welcome. Even patches to the documentation.
Oh Btw on a completely unrelated subject, if you fix the 'Use Client-Ip-Address/ Packet-Src-IP-Address attribute as a check item' then I can push the CVS head out live and give you some proper feedback ;)
Yeah, it turns out that some of the Packet-Src-IP-Address compares weren't even registered. The code has been re-shuffled, and it should now work, including with regular expressions. You'll have to list the "expr" module in the "instantiate" section for Packet-Src-IP-Address to work, though. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
I will put it on order as reference is better than nothing :) I have used radius before but not for ages (2000) I will be using it alot at this new job so I will need all the good references I can get. On 4/16/07, Alan DeKok <aland@deployingradius.com> wrote:
Arran Cudbard-Bell wrote:
What put me off the O'Rielly book was it's age.. Although I only started using FreeRADIUS with 1.1.4 , i've seen pretty rapid development. So I was concerned about how much relevance a book published in 2002 has today.
It covers RADIUS. It's good for people who are completely new to RADIUS.
There are also amazingly useful, mostly undocumented features like SQL Xlat, which won't be covered anywhere except the mailing list archives.
As always, patches are welcome. Even patches to the documentation.
Oh Btw on a completely unrelated subject, if you fix the 'Use Client-Ip-Address/ Packet-Src-IP-Address attribute as a check item' then I can push the CVS head out live and give you some proper feedback ;)
Yeah, it turns out that some of the Packet-Src-IP-Address compares weren't even registered. The code has been re-shuffled, and it should now work, including with regular expressions.
You'll have to list the "expr" module in the "instantiate" section for Packet-Src-IP-Address to work, though.
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Yea, after reading that book I barely got able to install the FR. I would say it tells you more about radius protocol then actual FR -----Original Message----- From: freeradius-users-bounces+radiussupport=lrcommunications.net@lists.freeradius .org [mailto:freeradius-users-bounces+radiussupport=lrcommunications.net@lists.fr eeradius.org] On Behalf Of Thor Spruyt Sent: Monday, April 16, 2007 5:06 PM To: FreeRadius users mailing list Subject: Re: O'Reillys Radius Book - Worth buying Alan DeKok wrote:
If you're familiar with RADIUS, it will contain little useful information.
I can confirm this. I was pretty disappointed about the value of the book when I bought it 3 years ago. I doesn't go indepth into anything. Thor. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
Hi, Im just getting started with freeradius (trying to nut out dynamic vlans atm) and I was wondering if this book would be a worth while purchase.
I had a great experience with O'reillys bind and perl cookbook books. Have any FR users used this book and if so your comments would be appreciated.
the O'Reilly book is a good resource if you are starting from minimal RADIUS knowledge and want a bit more background. ie its good for beginners through to experts. especially if you need to remind yourself of, eg, the exact structure of accounting packets. however it was written at the time of FreeRADIUS 0.9 - and is therefore a little dated with regards to some of the newer modules and methods....also password expressions. however it is a good fundamental start. for FreeRADIUS you cant go much better than the current deployingradius site, source tarball docs and historical mailing archives - and Alans forthcoming book! ;-) alan
Sorry, Another one for the list. Dynamic expansion of reply items in SQL is broken in current cvs head. Reply-Message = "Welcome %{User-Name} At wherever" Is printed as Welcome %{User-Name} At wherever Instead of Welcome Fluffy At Wherever. Thanks, Arran -- Arran Cudbard-Bell (ac221@sussex.ac.uk) Authentication Authorisation & Accounting Officer Infrastructure Services | ENG1 FF08 EXT:3900
Arran Cudbard-Bell wrote:
Dynamic expansion of reply items in SQL is broken in current cvs head.
Reply-Message = "Welcome %{User-Name} At wherever"
I'd suggest to try using back quotes in the table of reply items: Reply-Message = `Welcome %{User-Name} At wherever` -- Nicolas Baradakis
Arran Cudbard-Bell wrote:
Dynamic expansion of reply items in SQL is broken in current cvs head.
Reply-Message = "Welcome %{User-Name} At wherever"
Use: Reply-Message = `...` In 1.x, Reply-Message was *always* run through radius_xlat. In 2.0, it's done only if you ask it to. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Alan DeKok wrote:
Arran Cudbard-Bell wrote:
Dynamic expansion of reply items in SQL is broken in current cvs head.
Reply-Message = "Welcome %{User-Name} At wherever"
Use:
Reply-Message = `...`
In 1.x, Reply-Message was *always* run through radius_xlat. In 2.0, it's done only if you ask it to.
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Aha, so the significance of the back ticks is ..... That the string will be sent through radius_xlat ? And this is true for reply attributes in all the 'files' processed files ? Or is this a special feature of rlm_sql ? And yes, more efficient for the user to specify than assume :) Thanks Nicholas/Alan --- Arran
Arran Cudbard-Bell wrote:
Aha, so the significance of the back ticks is ..... That the string will be sent through radius_xlat ?
Yes. See doc/variables.txt, I believe.
And this is true for reply attributes in all the 'files' processed files ?
Or is this a special feature of rlm_sql ?
It's part of the server core. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
I will start reading it all ASAP, thanks alot guys :) On 4/16/07, A.L.M.Buxey@lboro.ac.uk <A.L.M.Buxey@lboro.ac.uk> wrote:
Hi,
Hi, Im just getting started with freeradius (trying to nut out dynamic vlans atm) and I was wondering if this book would be a worth while purchase.
I had a great experience with O'reillys bind and perl cookbook books. Have any FR users used this book and if so your comments would be appreciated.
the O'Reilly book is a good resource if you are starting from minimal RADIUS knowledge and want a bit more background. ie its good for beginners through to experts. especially if you need to remind yourself of, eg, the exact structure of accounting packets. however it was written at the time of FreeRADIUS 0.9 - and is therefore a little dated with regards to some of the newer modules and methods....also password expressions. however it is a good fundamental start.
for FreeRADIUS you cant go much better than the current deployingradius site, source tarball docs and historical mailing archives - and Alans forthcoming book! ;-)
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (7)
-
A.L.M.Buxey@lboro.ac.uk -
Alan DeKok -
Alex M -
Arran Cudbard-Bell -
Jacob Jarick -
Nicolas Baradakis -
Thor Spruyt