A simple hack to cacti, to use radius for authentication

[polarit]

Using radius for authentication.
This simple hack works for cisco acs, debian etch and cacti Version 0.8.6i (as installed by apt)

Install php-radius: apt-get install php-radius

Create and edit /etc/php-radius/server.conf
# php-radius config file, for use with cisco acs
# tacacs server
server 10.10.10.10
# the cisco acs server uses 1812 instead of well-known 1645
port 1812
suffix ""
# the shared key entered in tacacs
secret secretkey

Edit /usr/share/php-radius/radius_authentication.inc.php
Around line 46 from :

$s=chop($s);
if ($s[0]=="#") continue;
if (strlen($s)==0) continue;
to :
$s=chop($s);
if (strlen($s)==0) continue;
if ($s[0]=="#") continue;

replace original /usr/share/cacti/site/auth_login.php with attached auth_login.php

[polarit]

Oh darn, how does one attach files ???

[Howie]

You should also be able to do this using the external auth option in 0.8.7 and mod_auth_xradius (and no code changes) too...

not actually tried that, but m_a_xr was a drop-in replacement for mod_auth for our intranet.

[rony]