$Revision: 1.2 $
$Date: 2004/08/24 08:58:30 $
User's Guide
Overview
This module export functions necessary for group membership checking over radius. There
is a database table that contains list of users and groups they belong to. The table is
used by functions of this module.
Dependencies
&ser; Modules
The following modules must be loaded before this module:
None.
External Libraries or Applications
The following libraries or applications must be installed before running
&ser; with this module loaded:
radiusclient library.
Exported Parameters
<varname>radius_config</varname> (string)
Location of the configuration file of the radius client library.
Default value is /usr/local/etc/radiusclient/radiusclient.conf
.
Set <varname>radius_config</varname> parameter
...
modparam("group", "radius_config", "/etc/radiusclient.conf")
...
<varname>use_domain</varname> (integer)
If set to 1 then username@domain will be used for lookup, if set to 0 then only
username will be used.
Default value is 0 (no).
Set <varname>use_domain</varname> parameter
...
modparam("group_radius", "use_domain", 1)
...
Exported Functions
<function moreinfo="none">radius_is_user_in(URI, group)</function>
The function returns true if username in the given &uri; is member of the given
group and false if not.
Meaning of the parameters is as follows:
&uri; - &uri; whose username and optionally domain to be
used, this can be one of:
Request-URI - Use Request-URI username and (optionally) domain.
To - Use To username and (optionally) domain.
From - Use From username and (optionally) domain.
Credentials - Use digest credentials username.
group - Name of the group to check.
<function>radius_is_user_in</function> usage
...
if (radius_is_user_in("Request-URI", "ld")) {
...
};
...