The Mac Orchard - HomeHelpFAQALEMIAForumsDrew's Picks

Server Applications

Elektron

Company Page Home Page Release Notes License:
Commercial; $750

Current Version: 2.1.2376 (October 4, 2009)

Periodik Labs (formerly Corriente Networks LLC) produces Elektron, which is a software-based server that provides RADIUS/802.1X authentication services for Wi-Fi networks.

While version 2.1 is a bugfix release, version 2.0 added/changed the following:

  • Authentication Domains - Authentication domains allow you to map users to different authentication sources based on the user's domain. For instance, "user@foo.com" can be authenticated against your Active Directory, while "user@bar.com" can be authenticated against a remote LDAP server. Even if you have only a single domain, this feature gives you the ability to add support for guest accounts: configure "company.com" to authenticate against your company's user directory, while "guest.company.com" is configured to use Elektron's built-in user database for easy temporary account creation.
  • FIPS 140-2 Validated Cryptographic Module - Elektron version 2 uses a cryptographic module that has been tested and validated under the NIST Cryptographic Module Validation Program as meeting requirements for FIPS PUB 140-2, enabling its use in certain government and financial industry applications.
  • MAC Address Authentication Simultaneous use of MAC address and standard user account authentication is supported in Elektron version 2, and is fully configurable on a per-access point basis.
  • Full Windows Vista Support - Elektron's Windows Vista feature set has been updated to include full support for installation on Vista (including UAC support) and to authenticate Windows Vista clients when installed on any supported platform.
  • SNMP - Elektron can be configured to to respond to SNMP management information requests in accordance with the standardized RADIUS MIBs, and to issue SNMP traps is response to a user-configurable set of server events.
  • Authorization Policies - Policy support has been enhanced in Elektron version 2, with new support for triggering actions based on string pattern matching of the username, account groups, access points, and MAC addresses. Support for external scripts includes the ability to trigger policies based on the script result, and to have an external script act upon the result of the policy. Also included is greatly simplified configuration of VLAN assignment, one of the most common uses of authorization policies.
  • EAP-FAST - Support for Cisco's EAP Flexible Authentication via Secure Tunneling protocol makes its debut in Elektron version 2.
  • Least Privilege - Elektron version 2 honors the "principle of least privilege," in which the server performs its normal functions at the lowest possible level of security privilege, closing potential avenues of attacks on your server.

User Reviews

Currently, no user reviews have been submitted. Send me yours!


Also See . . .

Can't find what you're looking for? Try a search:

Also, if you have an older Mac, be sure to check out the "Classic" applications page for more options.

Finally, take a look at ALEMIA if you think you know that name of an application, but aren't quite sure.

Built Into Mac OS X

Mac OS X has a huge amount of TCP/IP-based server software built into it that I don't specifically cover here. Your "Sharing" Preference Pane allows you to enable and disable these services with a click of the mouse. The software running behind the scenes to provide many of these services is generally of the open source variety. The standard release of Mac OS X includes, among many others:

  • Apache httpd (web server; enabled via the Sharing Preference Pane).
  • Postfix (mail server; see Mac OS X Hints for more information).
  • tnftpd (FTP server; enabled via the Sharing Preference Pane).
  • OpenSSH (Secure Shell server; enabled via the Sharing Preference Pane via "Remote Login" but additionally configurable via selected applications listed on this page).
  • BIND (Domain Name System server; see Mac OS X Hints for more information).
  • Samba (Windows file sharing; enabled via the Sharing Preference Pane).
  • XFree86 (X Window server; enabled via the "X11" application in your "Utilities" folder, if you elected to install it with Mac OS X).

Of course, Mac OS X Server includes many more, in addition to offering more recent versions of many of the above servers.

Related Links

Graham Orndorff has written a superb collection of articles on setting up email servers and secure email clients on Mac OS X.

Also Consider . . .

These are applications that are newer and of potential interest, but which I haven't yet selected for permanent inclusion. Have a look, and let me know if you think they deserve to be part of the permanent collection!