Radius Server

[winsys]

Just installed MOTP-AS (http://motp-as.network-cube.de/) together with FreeRadius on my DS-209+II (running DSM-3). It needed a bit tweaking of the original install procedure (for MOTP-AS), required the install of sudo (through ipkg) and a minor tweak in the webserver section in DSM, but now my NAS is authenticating the login request for my firewall . MOTP-AS even has a neat GUI that allows on-the-fly creation of devices (mobiles) etc. and it can even help syncing the device with the website. There is a demo site at http://security.edu.pl/motp-as/ (user admin / password motp)

[maxxfi]

Honestly, I do not want a Radius as part of basic firmware, as its maintenance would slow down
release of DSM and not everybody needs Radius, but I would welcome it as addition in form of
.spk package.

[synologyorqnap]

Cisco has Radius on their rebranded Qnap units but Qnap itself doesn't. Maybe its too pro of a feature.

[winsys]

I agree that a Radius package may divert focus from some of the more pressing features needed for the NAS. If just access to website (FileStation etc.) could be secured by a Radius server I would be happy. Something like a per-user (and maybe even per application) setting.

[pz1]

not everybody needs Radius, but I would welcome it as addition in form of
.spk package.

+1

[Toxic]

i'd love to see Radius added to the DSM 3.0 it would be a nice feature.

[mtigner]

Does anyone one have a clear step-by-step process for installing freeradius, configuring it, on a DS1511? Thanks.

[mitzone]

+1

[4eyes]

Support to add RADIUS support as additional package in next version of firmware.

[pz1]

Support to add RADIUS support as additional package in next version of firmware.

An additional package is not necessarily bound to a specific firmware. So I would not mind if they released such a package tomorrow

[paradigm]

An additional package for Freeradius would be greatly appreciated. As it stands, we install it manually for clients that need it and disable automatic firmware updates where required.

[pz1]

As it stands, we install it manually for clients that need it and disable automatic firmware updates where required.

So what is your problem, if you have a means to install it?

[thunderbird]

Yes of course to support OTP (one time password)

[blafarm]

Strong +1

[gtyler]

I would use a Radius Server in an instant at home.

I would also use it as a selling point in getting my church off their dedicated server (and dedicated support person) once their remaining apps are moved to the cloud.

Wouldn't it make sense to pair this with an LDAP server?
There should be one GUI to configure the users and then put them in groups.
You could allow for multiple "shared secrets" that map to different groups.

I noticed there was an LDAP client option, but that's not so useful in a SOHO environment.

So far, I am very impressed with my DS212J