Installing the RADIUS server

Edit online

You can install the RADIUS server using either the installp command or SMIT. The RADIUS software is on the AIX® base media, and the image names are radius.base and bos.msg.<lang>.rte.

If you plan to use the LDAP directory as your information database to store user names and passwords, you must install the ldap.server. The installp software must be installed on each RADIUS server installation.

If you plan to use EAP-TLS authentication (for example, for authenticating digital certificates on a wireless network), you must also install OpenSSL 0.9.7 or later and supply the full path to the libssl.a library in the /etc/radius/radiusd.conf configuration file.

The RADIUS daemons can be started using the radiusctl command. When started, there are multiple radiusd processes running, one each for the following:
  • authorization
  • accounting
  • monitoring other daemons

Upon reboot, the daemons are automatically started at run level 2 unless RADIUS is configured for EAP-TLS..

To change this routine, modify the /etc/rc.d/rc2.d/Sradiusd file.

Note: If RADIUS is configured to authenticate digital certificates using EAP-TLS, the daemons cannot be configured to start automatically because the certificate passphrase must be entered by an administrator, which requires a manual start and restart of RADIUS using the radiusctl command.