How do I configure the FreeRADIUS server to check CHAP secrets?
I have done most testing on FreeRadius. FreeRadius is not currently shipped as part of Solaris. It can be downloaded from the Internet. I used someone else’s FreeRadius server, so I didn’t have to build it from scratch. I also have personal and dedicated use of this radius server, which facilitates debugging since I can stop and start the radius server whenever I want, as well as running it in debug mode. That being said, here is a summary of the steps I took to configure the FreeRadius server to authenticate a new iSCSI initiator or target. Modify clients.conf in /etc/raddb or equivalent directory to include an entry for the IP address of the initiator or target that is using RADIUS. This entry will also include the shared secret that was configured above. Modify the users file in /etc/raddb to include an entry for the CHAP names and CHAP secrets that should be verified. To RADIUS, these look just like usernames and passwords. Start the RADIUS server in debug mode and watch the output
