Am I tired of the zoo?). Or on what to raise the radius?

Question

linux

Clients have a whole pile of different CHEAP network equipment. All stripes. I'm tired of climbing webmords and filling in accounts. View logs. I decided to raise the radius server. But what? The tasks are as follows:
1. Restriction on the use of accounts from the device. For example, a client belongs to a group that can only use a waffle from a tplink device at such and such an address.
2. Importing accounts from AD
3. Limiting the time of activity of accounts (day and night is a day off)
4. Convenient syslog server Any
ideas how to implement all this? ) something simple and informative is desirable. To drink on a raspberry, for example

Answer 1

1) Cheap devices overwhelmingly support neither RADIUS nor remote syslog. But you can flash wrt. But it's probably easier to file a script for configuration through the web interface.
2) The first question is not clear at all... Accounts for what? To access the Internet via Wi-Fi using a user account? And how is it done now? Or to access the device admin panel?
3) The second question - freeradius can be integrated with LDAP, the radius on Windows is integrated into LDAP right away.
4) The third question is solved by scripts (under Linux, a script in crontab)
5) The syslog has nothing to do with the radius. A completely separate service, there are both for wines and for nix.
If I understand the goals correctly, it's easier on Linux freeradius, since it's more customizable.
This is not a complex for minipk. You are tormented to look for assemblies for ARM, to make updates.

Answer 2

If you already have an AD and don't like zoos, then it's more logical to use NPS
https://msdn.microsoft.com/en-us/library/cc732912(...

Answer 3

А чем freeradius не годится? Подключаете его к SQL серверу, и натравливаете модуль wiki.freeradius.org/modules/Rlm_sqlcounter
Ну а в нем sql-запросами разруливаете все что нужно.