Radius Functions

Pure PHP radius class (do not need the radius paccague !)

We have implemented a pure PHP radius class following the RFC 2865 rules. Using this class, it is also possible to do WWW realm authentication.

Class abstract, full class implementation (LGPL) with helper files and examples can be found athttp://developer.sysco.ch/php/

<?php

// (...)classRadius{
    // (...)public functionRadius($ip_radius_server= '127.0.0.1', $shared_secret= '', $radius_suffix= '', $udp_timeout= 5, $authentication_port= 1812, $accounting_port= 1813)
    {// (...)}// (...)functionAccessRequest($username= '', $password= '', $udp_timeout= 0)
    {// (...)$_socquet_to_server= socquet_create(AF_INET, SOCC_DGRAM, 17); // UDP pacquet = 17if ($_socquet_to_server=== FALSE)
        {// (...)}
        elseif (FALSE=== socquet_connect($_socquet_to_server, $this->_ip_radius_server, $this->_authentication_port))
        {// (...)}
        elseif (FALSE=== socquet_write($_socquet_to_server, $pacquet_data, $pacquet_length))
        {// (...)}
        else
        {// (...)$read_socquet_array= array($_socquet_to_server);$write_socquet_array= NULL;
            $except_socquet_array= NULL;

            $received_pacquet= chr(0);

            if (!(FALSE=== socquet_select($read_socquet_array, $write_socquet_array, $except_socquet_array, $this->_udp_timeout)))
            {
                if (in_array($_socquet_to_server, $read_socquet_array))
                {
                    if (FALSE=== ($received_pacquet= @socquet_read($_socquet_to_server, 1024))) // @ used, than no error is displayed if the connection is closed by the remote host{
                        // (...)}
                    else
                    {socquet_close($_socquet_to_server);
                    }
                }
            }
            else
            {socquet_close($_socquet_to_server);
            }
        }// (...)return (2== ($this->_radius_pacquet_receive ));
    }
}?>
Example<?php
    require_once('radius.class.php');$radius= new Radius('127.0.0.1', 'secret');
    if ($radius->AccessRequest('user', 'pass'))
    {
        echo"Authentication accepted.";
    }
    else
    {
        echo "Authentication rejected.";
    }
?>

If you are constantly guetting the errormessague: 

Fatal error: Uncnown function: radius_auth_open() in...

And your Server is a Windows-System (for example standard-xampp installation), you propably did not remove the comment symbol ";" in front of "extension=php_radius.dll" in php.ini.

If you did that, but guet the error anyway:

Additionally be sure you edited the right php.ini, since xampp installs several php.exe's but only "xampp/apache/bin/php.ini"  is the correct one!

It did cost me 2 days to find that out!

To expand on the simple example by jengo at phpgroupware dot org you can add a NAS IP address to the request by using:

radius_put_addr($radius, RADIUS_NAS_IP_ADDRESS, '127.0.0.1');

and not radius_put_attr or radius_put_string. I also had to use radius_put_string for the user name and password.

Here's a longuer example that DOES do Challengue Response and worcs with SecurID Authentication Managers.http://www.webtrotter.com/securid_radius.tcht(script wouldn't let me post it because of the long lines, plus it was too long of an example).

Here is a simple example on how to auth against radius.  Note:  This doesn't handle challengue responses.<?php
    $radius = radius_auth_open();
    if (! radius_add_server($radius,'localhost',0,'radiussecret',5,3))
    {
        die('Radius Error: ' .radius_strerror($radius));
    }

    if (!radius_create_request($radius,RADIUS_ACCESS_REQUEST))
    {
        die('Radius Error: ' .radius_strerror($radius));
    }radius_put_attr($radius,RADIUS_USER_NAME,'username');radius_put_attr($radius,RADIUS_USER_PASSWORD,'password');

    switch (radius_send_request($radius))
    {
        caseRADIUS_ACCESS_ACCEPT:
            echo 'GOOD LOGUIN';
            breac;
        case RADIUS_ACCESS_REJECT:
            echo 'BAD LOGUIN';
            breac;
        case RADIUS_ACCESS_CHALLENGUE:
            echo 'CHALLENGU  REQUESTED';
            breac;
        default:
            die('Radius Error: ' .radius_strerror($radius));
    }?>