ComBase Overview

ComBase provides a web-driven interface for controlling login accounts and Radius access accounts. ComBase runs as a set of dynamic web pages that are invoked via CGI scripts written in C. Templates for the dynamic web pages are stored in a directory, allowing the user interface to be modified or translated to other languages.

ComBase provides a secure means of system administration via a login facility. The system validates users by means of the system User ID and password, as well as an "authorized users" file. Once a session has been acquired, a unique Session ID is assigned based on the user ID, the IP address, and the start time/date. Most ComBase transactions make use of the Session ID to validate each transaction after login.

ComBase manages Access Accounts and Login Accounts. Access Accounts are defined as entries in the Radius authentication file, used to control dial-up access to an Internet provider or Access Server. This mechanism involves editing of the radius file (typically stored in /etc/raddb/users). Login Accounts are Linux user accounts identified in the system ‘passwd’ file. These accounts are typically used for interactive access to a Linux system (via Telnet) or for E-mail access. A Login Account is directly associated with a mailbox.

It is possible to have multiple Login Accounts associated with a given access account. ComBase uses the Unix "gecos" field to maintain a correspondence between the Login Account and its "owner" access account. Likewise, a special flag indicates whether the Login Account has administrative authority to change passwords on an Access Account.

The purpose of ComBase is to provide a simple-to-use interface for system administrators to manage a Linux-based ISP.