Principles of RADIUSdesk Realms

Realms are a way of grouping users in RADIUS. Since RADIUSdesk is only a front-end for FreeRADIUS, realms are also supported by RADIUSdesk.

• Normally, in RADIUS deployments, you can determine the realm a user belongs to based on the username.
• Let us assume we have alice@my_realm.com. We can assume that Alice belongs to the my_realm.com realm.
• RADIUSdesk allows you to follow this convention, but also gives you the flexibility to specify a user's email address as their username.
• So you can register Alice with her gmail email address as her username.
• We can now have the user alice.bodine@gmail.com which is part of the my_realm.com realm.
• In RADIUSdesk ALL Vouchers and Permanent Users belongs to one realm.
• BYOD devices automatically belong to the realm of the permanent user who owns the device.

• A cloud can contain zero or more realms.
• The cloud thus becomes the owner of the realm.
• So if you want an administrator to manage the users of a realm, make sure that they have administrator rights for the cloud under which the realm was created.

• If you add a RADIUS client, you have the option of only allowing network access to users from a specific realm (there can be several realms).

• You may have noticed these two buttons in the toolbar of the realm management applet
• This is part of a new feature that is currently being developed and will be released soon.