radtest(1) [centos man page]

RADTEST(1)							 FreeRADIUS Daemon							RADTEST(1)

NAME

       radtest - send packets to a RADIUS server, show reply

SYNOPSIS

       radtest [-d raddb_directory] [-t pap/chap/mschap] [-x ] [-4 ] [-6 ] user password radius-server nas-port-number secret [ppphint] [nasname]

DESCRIPTION

       radtest	is  a  frontend to radclient(1). It generates a list of attribute/value pairs based on the command line arguments, and feeds these
       into radclient. It's a fast and convenient way to test a radius server.

OPTIONS

       -d raddb_directory
	      The directory that contains the RADIUS dictionary files. Defaults to /etc/raddb.

       -t pap/chap/mschap/eap-md5
	      Choose the authentiction method to use.  e.g. "-t pap", "-t chap", "-t mschap", or "-t eap-md5",.  Defaults to "pap".  Using EAP-MD5
	      requires that the "radeapclient" program is installed.

       -x     Enables debugging output for the RADIUS client.

       -4     Use NAS-IP-Address for the NAS address (default)

       -6     Use NAS-IPv6-Address for the NAS address (default)

       user   Username to send.

       password
	      Password of the user.

       radius-server
	      Hostname or IP address of the radius server. Optionally, you may specify a port by appending :port

       nas-port-number
	      The  value  of  the NAS-Port attribute. Is an integer between 0 and 2^31, and it really doesn't matter what you put here. 10 will do
	      fine.

       secret The shared secret for this client.

       ppphint
	      If you put an integer > 0 here, radtest (or actually radclient) will add the attribute Framed-Protocol = PPP to the request packet.

       nasname
	      If present, this will be resolved to an IP address and added to the request packet as the NAS-IP-Address	attribute.  If	you  don't
	      specify it, the local hostname of the system will be used.

SEE ALSO

       radiusd(8), radclient(1).

AUTHOR

       Miquel van Smoorenburg, miquels@cistron.nl.

								   5 April 2010 							RADTEST(1)

RADWHO(1)							 FreeRADIUS Daemon							 RADWHO(1)

NAME

       radwho - show online users

SYNOPSIS

       radwho [-c] [-d raddb_directory] [-F radutmp_file] [-i] [-n] [-N nas_ip_address] [-p] [-P nas_port] [-r] [-R] [-s] [-S] [-u user] [-U user]
       [-Z]

DESCRIPTION

       The FreeRADIUS server can be configured to maintain an active session database in a file called radutmp. This utility shows the content	of
       that session database.

OPTIONS

       -c     Shows caller ID (if available) instead of the full name.

       -d raddb_directory
	      The directory that contains the RADIUS configuration files. Defaults to /etc/raddb.

       -F radutmp_file
	      The file that contains the radutmp file.	If this is specified, -d is not necessary.

       -i     Shows the session ID instead of the full name.

       -n     Normally radwho looks up the username in the systems password file, and shows the full username as well. The -n flags prevents this.

       -N nas_ip_address
	      Show only those entries which match the given NAS IP address.

       -p     Adds an extra column for the port type - I for ISDN, A for Analog.

       -P nas_port
	      Show only those entries which match the given NAS port.

       -r     Outputs all data in raw format - no headers, no formatting, fields are comma-separated.

       -R     Output all data in RADIUS attribute format.  All fields are printed.

       -s     Show full name.

       -S     Hide shell users. Doesn't show the entries for users that do not have a SLIP or PPP session.

       -u user
	      Show only those entries which match the given username (case insensitive).

       -U user
	      Show only those entries which match the given username (case sensitive).

       -Z     When  combined  with -R, prints out the contents of an Accounting-Request packet which can be passed to radclient, in order to "zap"
	      that users session from radutmp.

       For example,

	      $ radwho -ZRN 10.0.0.1 | radclient -f - radius.example.net acct testing123

       will result in all an Accounting-Request packet being sent to the RADIUS server, which tells the server that the  NAS  rebooted.   i.e.	It
       "zaps" all of the users on that NAS.

       To "zap" one user, specifiy NAS, username, and NAS port:

	      $ radwho -ZRN 10.0.0.1 -u user -P 10 | radclient -f - radius.example.net acct testing123

       Other combinations are also possible.

SEE ALSO

       radiusd(8), radclient(1), radiusd.conf(5).

AUTHOR

       Miquel van Smoorenburg, miquels@cistron.nl.

								    17 Feb 2013 							 RADWHO(1)