RadiusService

Overview

The RadiusService class provides an implementation of a RADIUS server simulation using a workflow. This service allows administrators to configure a RADIUS authentication workflow within the authentication engine.

Implemented Interfaces

• EngineAware

• TrustbuilderServiceLifecycle

Available Methods

Set Authentication Engine

void setEngine(Engine engine)

Assigns the authentication engine used for RADIUS authentication.

• Parameters:

  • engine (Engine): The authentication engine.

Start RADIUS Service

void start()

Initializes and starts the RADIUS listener.

• Behavior:

  • Creates an instance of RadiusListener.

  • Binds it to the configured port.

  • Links it to the authentication engine and workflow.

  • Starts the listener.

Stop RADIUS Service

void stop()

Shuts down the RADIUS listener.

Set Shared Secret

void setSharedSecret(String sharedSecret)

Defines the shared secret used for RADIUS authentication. The secret is encrypted before being stored.

• Parameters:

  • sharedSecret (String): The secret key used for RADIUS authentication.

• Behavior:

  • Encrypts the provided secret using EncryptedPassword.

Set RADIUS Port

void setPort(int port)

Defines the port on which the RADIUS listener operates.

• Parameters:

  • port (int): The RADIUS service port (default: 1812).

Set Authentication Workflow

void setWorkflow(String workflow)

Assigns the workflow used for handling RADIUS authentication requests.

• Parameters:

  • workflow (String): The identifier of the workflow.

Dependencies

• RadiusListener: Handles incoming RADIUS authentication requests.

• Engine: The authentication engine that processes RADIUS authentication.

• EncryptedPassword: Encrypts the shared secret before storage.

Security Considerations

• Shared Secret Encryption: The shared secret is stored securely using encryption.

• Use Secure Ports: Default RADIUS traffic runs on port 1812, but administrators should consider using RADSEC (TLS-protected RADIUS) for enhanced security.

• Restrict Access: The RADIUS listener should only be exposed to trusted network sources.

Summary

The RadiusService provides an implementation of a RADIUS authentication service within the authentication engine, allowing administrators to simulate a RADIUS server using authentication workflows.