Summary

Authorization can become the most complex part of FreeRADIUS. By making good use of what unlang offers, we can overcome almost every imaginable problem.

In this chapter, we have covered:

  • Applications of restrictions: Restrictions can be applied at the RADIUS server or at the NAS device.
  • Unlang: Unlang is a powerful processing language that allows us to manipulate the way an incoming request is handled by FreeRADIUS. It features conditional checks that can control the flow of a request. It also allows for interaction with certain modules like the sql module to obtain results from an SQL database. Unlang enables us to manipulate and add AVPs that will be returned with Access-Accept packets. The use of unlang should be mastered by anyone who ...

Get FreeRADIUS Beginner's Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.