apt-get install freeradius freeradius-ldap radiusclient1 libcompress-zlib-perl

nano /etc/freeradius/radiusd.conf
	ldap {
	       server = "192.168.1.72"
	       identity = "cn=admin,dc=porkyhttp,dc=no-ip,dc=info"
	       password = "pwdads31"
	       basedn = "dc=porkyhttp,dc=no-ip,dc=info"
	       base_filter = "(objectclass=radiusprofile)"
	       #start_tls = yes
	       # This is your Certificate Authority (CA) certificate
	       #tls_cacertfile = /etc/ldap/csca.crt
	       #tls_require_cert = "demand"
	       # default_profile = "cn=radprofile,ou=dialup,o=My Org,c=UA"
	       # profile_attribute = "radiusProfileDn"
	       access_attr = "uid"
	       dictionary_mapping = ${raddbdir}/ldap.attrmap
	       authtype = ldap
	       ldap_connections_number = 5
	       timeout = 4
	       timelimit = 3
	       net_timeout = 1
	}



nano /etc/freeradius/sites-enabled/default
	authorize {
		preprocess
		chap
		mschap
		suffix
		ldap
		eap
	}

	authenticate {
		Auth-Type PAP {
		        pap
		}
		Auth-Type MS-CHAP {
		        mschap
		}
		Auth-Type LDAP {
		        ldap
		}
		eap
	}




nano /etc/freeradius/ldap.attrmap
	checkItem       User-Password                  userPassword

	replyItem   	Tunnel-Type                    radiusTunnelType
	replyItem   	Tunnel-Medium-Type             radiusTunnelMediumType
	replyItem   	Tunnel-Private-Group-Id        radiusTunnelPrivateGroupId



/etc/init.d/freeradius stop


freeradius -X
	[...]
	Listening on authentication address * port 1812
	Listening on accounting address * port 1813
	Listening on proxy address * port 1814
	Ready to process requests.

	[CTRL+C]



/etc/init.d/freeradius start



nano /etc/radiusclient/radiusclient.conf
	auth_order      radius
	login_tries     4
	login_timeout   60
	nologin 	/etc/nologin
	issue   	/etc/radiusclient/issue
	authserver      localhost
	acctserver      localhost
	servers         /etc/radiusclient/servers
	dictionary      /etc/radiusclient/dictionary
	login_radius    /usr/sbin/login.radius
	seqfile         /var/run/radius.seq
	mapfile         /etc/radiusclient/port-id-map
	default_realm
	radius_timeout  10
	radius_retries  3
	login_local     /bin/login



nano /etc/radiusclient/servers
	localhost                                       1234567890





nano /etc/radiusclient/dictionary.microsoft
	#
	#       Microsoft's VSA's, from RFC 2548
	#
	#       $Id: dictionary.microsoft,v 1.1 2002/03/06 13:23:09 dfs Exp $
	#

	VENDOR          Microsoft       311     Microsoft

	ATTRIBUTE       MS-CHAP-Response        1       string  Microsoft
	ATTRIBUTE       MS-CHAP-Error           2       string  Microsoft
	ATTRIBUTE       MS-CHAP-CPW-1           3       string  Microsoft
	ATTRIBUTE       MS-CHAP-CPW-2           4       string  Microsoft
	ATTRIBUTE       MS-CHAP-LM-Enc-PW       5       string  Microsoft
	ATTRIBUTE       MS-CHAP-NT-Enc-PW       6       string  Microsoft
	ATTRIBUTE       MS-MPPE-Encryption-Policy 7     string  Microsoft
	# This is referred to as both singular and plural in the RFC.
	# Plural seems to make more sense.
	ATTRIBUTE       MS-MPPE-Encryption-Type 8       string  Microsoft
	ATTRIBUTE       MS-MPPE-Encryption-Types  8     string  Microsoft
	ATTRIBUTE       MS-RAS-Vendor           9       integer Microsoft
	ATTRIBUTE       MS-CHAP-Domain          10      string  Microsoft
	ATTRIBUTE       MS-CHAP-Challenge       11      string  Microsoft
	ATTRIBUTE       MS-CHAP-MPPE-Keys       12      string  Microsoft
	ATTRIBUTE       MS-BAP-Usage            13      integer Microsoft
	ATTRIBUTE       MS-Link-Utilization-Threshold 14 integer        Microsoft
	ATTRIBUTE       MS-Link-Drop-Time-Limit 15      integer Microsoft
	ATTRIBUTE       MS-MPPE-Send-Key        16      string  Microsoft
	ATTRIBUTE       MS-MPPE-Recv-Key        17      string  Microsoft
	ATTRIBUTE       MS-RAS-Version          18      string  Microsoft
	ATTRIBUTE       MS-Old-ARAP-Password    19      string  Microsoft
	ATTRIBUTE       MS-New-ARAP-Password    20      string  Microsoft
	ATTRIBUTE       MS-ARAP-PW-Change-Reason 21     integer Microsoft

	ATTRIBUTE       MS-Filter               22      string  Microsoft
	ATTRIBUTE       MS-Acct-Auth-Type       23      integer Microsoft
	ATTRIBUTE       MS-Acct-EAP-Type        24      integer Microsoft

	ATTRIBUTE       MS-CHAP2-Response       25      string  Microsoft
	ATTRIBUTE       MS-CHAP2-Success        26      string  Microsoft
	ATTRIBUTE       MS-CHAP2-CPW            27      string  Microsoft

	ATTRIBUTE       MS-Primary-DNS-Server   28      ipaddr  Microsoft
	ATTRIBUTE       MS-Secondary-DNS-Server 29      ipaddr  Microsoft
	ATTRIBUTE       MS-Primary-NBNS-Server  30      ipaddr  Microsoft
	ATTRIBUTE       MS-Secondary-NBNS-Server 31     ipaddr  Microsoft

	#ATTRIBUTE      MS-ARAP-Challenge       33      string  Microsoft


	#
	#       Integer Translations
	#

	#       MS-BAP-Usage Values

	VALUE           MS-BAP-Usage            Not-Allowed     0
	VALUE           MS-BAP-Usage            Allowed         1
	VALUE           MS-BAP-Usage            Required        2

	#       MS-ARAP-Password-Change-Reason Values

	VALUE   MS-ARAP-PW-Change-Reason        Just-Change-Password            1
	VALUE   MS-ARAP-PW-Change-Reason        Expired-Password                2
	VALUE   MS-ARAP-PW-Change-Reason        Admin-Requires-Password-Change  3
	VALUE   MS-ARAP-PW-Change-Reason        Password-Too-Short              4

	#       MS-Acct-Auth-Type Values

	VALUE           MS-Acct-Auth-Type       PAP             1
	VALUE           MS-Acct-Auth-Type       CHAP            2
	VALUE           MS-Acct-Auth-Type       MS-CHAP-1       3
	VALUE           MS-Acct-Auth-Type       MS-CHAP-2       4
	VALUE           MS-Acct-Auth-Type       EAP             5

	#       MS-Acct-EAP-Type Values

	VALUE           MS-Acct-EAP-Type        MD5             4
	VALUE           MS-Acct-EAP-Type        OTP             5
	VALUE           MS-Acct-EAP-Type        Generic-Token-Card      6
	VALUE           MS-Acct-EAP-Type        TLS             13




nano /etc/radiusclient/dictionary
	INCLUDE /etc/radiusclient/dictionary.merit 
	INCLUDE /etc/radiusclient/dictionary.microsoft 


nano /etc/freeradius/clients.conf
	 secret          = 1234567890



/etc/init.d/freeradius restart
/etc/init.d/pptpd restart