How To Setup Squid Authenticate with Radius on CentOS 6

quarta-feira, 21 de maio de 2014

How To Setup Squid Authenticate with Radius on CentOS 6

In this how to, I assume you already have a setup running FreeRADIUS server. I am going to share how to install and setup Squid 3.1.10 on CentOS 6.4 version. This how to has been tested on Windows 7 and Chrome as a client.

First, we must ensure everything are up to date by running the following commands: -

yum check-update
yum -y update

Next, start installing Squid by running the following command: -

yum -y install squid

Now, add the following auth_param and http_access config below in /etc/squid/squid.conf file after line 6: -

# Radius Authentication
auth_param basic program /usr/lib64/squid/squid_radius_auth -f /etc/squid/squid_radius_auth.conf
auth_param basic children 5
auth_param basic realm My-Squid-Server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
acl radius-auth proxy_auth REQUIRED

# Allow Radius Authorized Users
http_access allow radius-auth

Next, include the following config below in /etc/squid/squid_radius_auth.conf file: -

# Radius server and secret
server 1.2.3.4
secret my-secret-here

Now, start Squid service and create a system startup links for Squid so it starts automatically whenever the system boots up: -

service squid start
chkconfig squid on

Now you can test the helper, execute and then type your radius username/password on the same line separated with space, on successful authentication it will give “OK” otherwise “ERR login failure”