基于LDAP和Radius的统一资源访问控制的实现

在一个大型的网络信息应用系统中，存在着各种各样的资源和应用．不同的用户对于不同的资源，访问权限是不一样的，目前，对于这个问题的解决，主要是通过不同的访问控制机制来实现的，从而导致了管理、应用复杂，且成本高．针对这一问题，提出了基于LDAP和Radius的统一资源访问控制机制，可以对不同的资源、不同的应用及使用者进行统一的管理．同时作者结合实际开发，提出了一个基于开放源代码系统的、可行的、稳定的认证平台及其所涉及的相关技术及方案，具有很强的实践性．

Implementatiou of uniform resources access control based on LDAP and Radius

There are various resources and applications in a large scale network. As for the access control of these resources,the current popular way is to use different access control mechanisms respectively.This eventually leads to higher cost and complicate management.This paper presents a uniform resources access control mechanism based on directory service and Radius service,where the management of different resources and applications may be rendered much easier,In addition the specific implementation of this system is also given in the paper.The author integrated the theorginto the actual development,proposed an authentication platform and its related techniques and scheemes that were based on systemtic, feasible and stable open source,which was practically workable.