blind-oracle/go-radius

Golang RADIUS library with server/client support

go-radius

It's quite heavily rewritten fork of another Go RADIUS library

Be advised that this library is not actively maintained, the upstream might better suit your needs

Significant changes are:

• Common

  • Encoding/Decoding of attribute 26 (Vendor-Specific)
  • RFC2866 & RFC2869 (Accounting)

• Server

  • Request throttling (maximum requests per second) support
  • Supports limiting the number of requests in processing queue
  • Multiple RADIUS Secrets based on packet's source IP with a fallback default
  • Request/Response packet replication (useful for logging, IDS etc)
  • Configurable UDP buffer size

• Client

  • Lots of vendor-specific (Cisco, Juniper, Mikrotik) functions and constants
  • Support for generating CoA/Disconnect-Message packets

Installation

go get -u github.com/blind-oracle/go-radius

Server example

import (
    "github.com/blind-oracle/go-radius"
    "log"
)

func main() {
    handler := func (w radius.ResponseWriter, p *radius.Packet) {
        w.AccessAccept()
    }

    server := radius.Server{
        Addr:           "0.0.0.0:1812",
        Handler:        radius.HandlerFunc(handler),
        Secret:         []byte(o.RADIUSSecret),
        Dictionary:     radius.Builtin,
    }

    if err := server.ListenAndServe(); err != nil {
        log.Fatal(err)
    }
}

Client example

import (
    "github.com/blind-oracle/go-radius"
    "log"
)

func main() {
    client := radius.Client{}
    packet := radius.New(radius.CodeAccessRequest, []byte("VerySecret"))
    packet.Add("Calling-Station-Id", "NAS-Fake")

    reply, err := client.Exchange(packet, "1.2.3.4:1812")
    if err != nil {
        log.Fatalf(err)
    }

    switch reply.Code {
        case radius.CodeAccessAccept:
        log.Println("Accept")
        case radius.CodeAccessReject:
        log.Println("Reject")
    }
}

Authors

• Tim Cooper ([email protected])
• Igor Novgorodov ([email protected])

go-radius's Issues

How to use this radius library?

Can you give me an example ?

server can not verify password base on CHAPPassword and CHAPChallenge(not mschapv2)

Tested with radius client on switch huawei s5700
I may try to implement it myself.

relative: layeh/radius#96

Missing commit history?

Looking at this repo, it's README mentions it's a clone of https://github.com/layeh/radius.

It seems like the complete commit history for that repo has been removed though. 😦

Kind of wondering why, as the commit history is kind of useful when looking back through prior changes. 😄