Method for implementing IAS system and Radius system integration

Abstract

The invention discloses a method for realizing integration of an IAS system and a Radius system, wherein, a domain user is established in the IAS system and configured with a password, a password strategy and authorization; a user having the same name with the domain user is established in the Radius system; when the user inputs an arbitrary password, the Radius system binds a pricing strategy and an authentication strategy for the user; the IAS system and the Radius system jointly authenticate the domain user. By adopting the method of the invention, the IAS system and the Radius system are integrated for finishing the treatment procedures synchronously, such as authentication and charging when the user logs in network or computer domain, which not only reduces the workload of login for the user, but also realizes one step login for the user, thus greatly enhancing the security, meeting the requirements for convenience and security of the login from enterprises and making a great progress over the prior art.

Description

Technical field [0001] The invention relates to a method for remote user dial-up authentication in the communication field, in particular to a method for realizing the integration of a Radius system and an IAS system. Background technique [0002] The full name of the Radius system is Remote Authentication Dial In User Service, that is, remote authentication dial-in user service. The Radius system is used to complete AAA functions for users, that is, authentication (Authentication), authorization (Authorization), and accounting (Accounting) functions. The user can complete the network access function by logging into the Radius system. [0003] At present, in many enterprises and institutions, users not only need to have the network access function, but also need to have the computer domain access function. Therefore, after the user logs in to the network, it is also necessary to log in as a domain user. [0004] And in the Windows 200x Server operating system comes with a Radius ...

AI Technical Summary

Problems solved by technology

[0004] In the Windows 200x Server operating system, there is a Radius server that is IAS (Internet Authentication Service: Internet Authentication Service System), and its users are stored in the AD domain (Active Directory: Active Directory Service Domain) manager. Therefore, as long as After passing the IAS authentication, the user has also passed the authentication of the computer domain, and can have the access authority of the domain user, but the IAS server only has the authentication and authorization function, and does not have the accounting function.

[0005] As a result, the existing authentication process in the prior art is relatively cumbersome, and the function is relatively single, and the billing function cannot be realized

Images