User's Manual

Enabling RADIUS Authentication, Authorization, and Accounting

5-20 Oracle Database Advanced Security Administrator's Guide

Task 6: Add the RADIUS Client Name to the RADIUS Server Database

You can use virtually any RADIUS server that complies with the standards in the

Internet Engineering Task Force (IETF) RFC #2138, Remote Authentication Dial In

User Service (RADIUS) and RFC #2139 RADIUS Accounting. Because RADIUS

servers vary, consult the documentation for your particular RADIUS server for any

unique interoperability requirements.

Perform the following steps to add the RADIUS client name to a Livingston

RADIUS server:

1. Open the clients ﬁle, which can be found at /etc/raddb/clients. The

following text and table appear:

This file contains a list of clients which are allowed to make

authentication requests and their encryption key. The first field is a valid

hostname. The second field (separated by blanks or tabs) is the encryption

key.

Client Name Key

2. In the CLIENT NAME column, enter the host name or IP address of the host on

which the Oracle database server is running. In the KEY column, type the

shared secret.

The value you enter in the CLIENT NAME column, whether it is the client's

name or IP address, depends on the RADIUS server.

3. Save and close the clients ﬁle.

Task 7: Conﬁgure the Authentication Server for Use with RADIUS

See the authentication server documentation for instructions about conﬁguring the

authentication servers.

Task 8: Conﬁgure the RADIUS Server for Use with the Authentication Server

See the RADIUS server documentation.

See Also: Administration documentation for the RADIUS server

See Also: "Related Documentation" onpage -xxix, which contains

a list of possible resources.