Introduction

RADIUS is a protocol commonly used by ISPs for authenticating dial-in and other remote users; it’s also used by routers and other network hardware. Popular servers include FreeRADIUS, GNU RADIUS, and the delightfully-name Steel Belted RADIUS.

Motivation

This little package was developed because my place of work uses RSA SecurID token authentication, and it can be accessed via RADIUS – much more easily than their proprietary protocol.

All the heavy lifting here is doing by Wichert Akkerman’s “pyrad” package; this just wraps it up for easy consumption by Django.

The code was based on the example at http://docs.djangoproject.com/en/dev/topics/auth/#other-authentication-sources

This code tries hard to catch any error which might throw an exception so that failure of the backend (misconfigured RADIUS server, bad import, etc) returns None indicating auth faiure.

On successful authentication, the User object is returned. If this user is new to Django, a new User is created in the Django database.

Non-Features

Traditionally, upon authentication, the RADIUS server can return various attribute/value pairs such as allocated IP address and subnetmask, in addition to the Success code. ADIUS can also handle “accounting” the focus here simply on authentication.

Usage

AUTHENTICATION_BACKENDS = (
    'django.contrib.auth.backends.ModelBackend',
    'authbackends.authsawsbackend.AuthSawsBackend',
    'koansys.django.authradius.AuthRadius',
  )

To Do

Tests. Sorry.

1.0.3 2009-02-25

Correct usage example, oops.

1.0.2 2009-02-25

Re-Fix URL info, add address.

1.0.1 2009-02-25

Fix URL info, upload to googlecode, post to pypi.

1.0.0 2009-02-25

Creating public egg code from internal private cholesterol-free code.