Principles of RADIUSdesk Realms

Realms are a way of grouping users in RADIUS. Since RADIUSdesk is only a front-end for FreeRADIUS, realms are also supported by RADIUSdesk.

  • Normally, in RADIUS deployments, you can determine the realm a user belongs to based on the username.
  • Let us assume we have alice@my_realm.com. We can assume that Alice belongs to the my_realm.com realm.
  • RADIUSdesk allows you to follow this convention, but also gives you the flexibility to specify a user's email address as their username.
  • So you can register Alice with her gmail email address as her username.
  • We can now have the user alice.bodine@gmail.com which is part of the my_realm.com realm.
  • In RADIUSdesk ALL Vouchers and Permanent Users belongs to one realm.
  • BYOD devices automatically belong to the realm of the permanent user who owns the device.
  • A cloud can contain zero or more realms.
  • The cloud thus becomes the owner of the realm.
  • So if you want an administrator to manage the users of a realm, make sure that they have administrator rights for the cloud under which the realm was created.
  • If you add a RADIUS client, you have the option of only allowing network access to users from a specific realm (there can be several realms).
  • You may have noticed these two buttons in the toolbar of the realm management applet
  • This is part of a new feature that is currently being developed and will be released soon.
  • radius/rad_realms.txt
  • Last modified: 2024/02/12 05:34
  • by system