Mac® Security Bible

31.9. Configuring RADIUS

The term RADIUS (Remote Authentication Dial In User Service) is a bit of an anachronism in that its primary use these days has nothing to do with dial-in network access. Instead, it's now used mainly as an authorization mechanism for wireless networks. On Mac OS X Server, RADIUS lets you restrict access to your wireless network via AirPort base stations to those who have authenticated against an Open Directory database.

NOTE

For more on RADIUS, see Chapter 16.

To set up Mac OS X Server's RADIUS service, follow these steps:

1. Open Server Admin, which is located in /Applications/Server.

2. In the sidebar on the left, select your server.

3. If no services are listed under the server name, click the disclosure triangle next to the server name to reveal them.

4. If the service names are dimmed, choose Server Connect, type your username and password if they're not already filled in, and then click Connect. The list of services refreshes, and those currently running appear with a green dot next to them.

5. In the sidebar under your server name, select RADIUS. If RADIUS doesn't appear in the list, you must first add it by selecting your server name, clicking Settings, clicking Services, clicking the check box next to RADIUS, and then clicking Save.

6. Click the Base Stations button on the toolbar, shown in Figure 31.18.

   Figure 31.18. In this pane, add AirPort base stations that will ...