keycloak-radius-plugin icon indicating copy to clipboard operation
keycloak-radius-plugin copied to clipboard

"keycloak-radius-plugin" programe need to run with "free radius" programe?

Open coolbobo opened this issue 2 years ago • 3 comments

i have two question, need you help. 1.When I run the expamle program "Assign attributes dynamically using javascript policy", do I need to run "keyclock-radius-plugin" + "free radius" , or just need to run the "keycloak-radius-plugin"? 2. when i only run the "keycloak-radius-plugin" programe, then run example program "Assign attributes dynamically using javascript policy", find out the error information: "Error: Timed out after 2500ms(1 retries) thank you very much.

coolbobo avatar Dec 04 '21 05:12 coolbobo

  1. "free radius" is Not needed, keycloak-radius-plugin uses the embedded version of radius server.
  2. How you run application? I suggest to use docker, because it provides a fully configured server.
cd Examples/RadiusAuthorizationJSExample
docker run -p 8090:8080 -p1812:1812/udp -p1813:1813/udp -e JAVA_OPTS="-Dkeycloak.profile.feature.scripts=enabled -Dkeycloak.profile.feature.upload_scripts=enabled -server -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true" -e KEYCLOAK_USER=admin -e KEYCLOAK_PASSWORD=admin  -v `pwd`/.:/example  -e KEYCLOAK_IMPORT=/example/authorization-realm.json  vassio/keycloak-radius-plugin

Keycloak master credentials admin/admin Radius credentials (keycloak Realm: radius-authorization-example): testuser/testUser

vzakharchenko avatar Dec 05 '21 18:12 vzakharchenko

i have slove the problem, thank you very much. another problem: Does "keycloak-radius-plugin" have portal function ?

coolbobo avatar Dec 05 '21 22:12 coolbobo

What do you mean about portal function? If you mean Radius Hotspot then yes, "keycloak-radius-plugin" have portal function.

Here example for Mikrotik: https://github.com/vzakharchenko/mikrotik-hotspot-oauth

If need limit users you can assign Radius attribute to USER/ROLE/GROUP/RESOURCE

here example for Mikrotik:

Mikrotik-Rate-Limit = 1024k/1024k

vzakharchenko avatar Dec 06 '21 14:12 vzakharchenko