# OpenAM Administration Guide
2.2. Configuring Authentication Modules

Sidebar | Prev | Up | Next

### 2.2.18. Hints For the RADIUS Authentication Module

The Remote Authentication Dial-In User Service (RADIUS) module lets OpenAM authenticate users against RADIUS servers.

ssoadm service name: `iPlanetAMAuthRadiusService`

Primary Radius Servers, Secondary Radius Servers

  Specify the IP address or fully qualified domain name of the primary RADIUS server. The default is `127.0.0.1` (localhost loopback).

  ssoadm attribute: `primary is iplanet-am-auth-radius-server1`; secondary is `iplanet-am-auth-radius-server2`

Shared Secret

  Specify the shared secret for RADIUS authentication. The shared secret should be as secure as a well-chosen password.

  ssoadm attribute: `iplanet-am-auth-radius-secret`

Port Number

  Specify the RADIUS server port. Default is 1645.

  ssoadm attribute: `iplanet-am-auth-radius-server-port`

Timeout

  Specify how many seconds to wait for the RADIUS server to respond. The default value is 3 seconds.

  ssoadm attribute: `iplanet-am-auth-radius-timeout`

Health check interval

  Used for failover. Specify how often OpenAM performs a health check on a previously unavailable RADIUS server by sending an invalid authentication request. Default: 5 minutes

  ssoadm attribute: `openam-auth-radius-healthcheck-interval`

Authentication Level

  Sets the authentication level used to indicate the level of security associated with the module. The value can range from 0 to any positive integer.

  ssoadm attribute: `iplanet-am-auth-radius-auth-level`