gpappsoft/keyrad repository overview

⁠A Go-based RADIUS server that authenticates users against Keycloak, supporting password and OTP (TOTP) flows.

⁠Features include:

• Challenge-response for OTP
• YAML-based Keycloak and RADIUS config
• FreeRADIUS-style clients.conf for client secrets
• Optional Message-Authenticator
• Scope/group-to-RADIUS attribute mapping (with regexp support)
• Vendor-Specific Attributes (VSA): Return vendor-specific attributes (e.g. MikroTik, Cisco, Ubiquiti) in Access-Accept responses based on user roles, groups, or scopes
• Configurable OTP mode: Use standard challenge-response or style
• Configurable OTP challenge message via otp_challenge_message in config
• Asynchronous/multi-request support: Multiple RADIUS requests are handled concurrently for high performance

⁠Usage

TBD Please visit project site: keyrad⁠

⁠Enterprise suppport

The sec73⁠ company offers professional support.

Please contact [email protected]⁠ for more information.