turbot/jumpcloud
steampipe plugin install jumpcloud

Table: jumpcloud_radius_server - Query JumpCloud Radius Servers using SQL

JumpCloud Radius Server is a feature within JumpCloud's Directory-as-a-Service platform that allows for secure, centralized authentication and authorization for network access. It provides a way to manage and control user access to networks, ensuring only authorized individuals can access specific network resources. JumpCloud Radius Server helps maintain network security by enforcing access policies and providing detailed logging of access attempts.

Table Usage Guide

The jumpcloud_radius_server table provides insights into Radius Servers within JumpCloud's Directory-as-a-Service platform. As a network administrator, explore server-specific details through this table, including server ID, name, networks, and other related information. Utilize it to monitor and control user access to networks, enforce access policies, and maintain network security.

Examples

Basic info

Discover the segments that are linked to your JumpCloud Radius Server. This query can be used to analyze the name, ID, and organization associated with each network source IP, providing insights into your server's connections.

select
name,
id,
organization,
network_source_ip
from
jumpcloud_radius_server;
select
name,
id,
organization,
network_source_ip
from
jumpcloud_radius_server;

List servers with MFA disabled

Identify instances where Multi-Factor Authentication (MFA) is disabled on servers to enhance security measures by promptly addressing potential vulnerabilities.

select
name,
id,
organization,
network_source_ip
from
jumpcloud_radius_server
where
mfa = 'DISABLED';
select
name,
id,
organization,
network_source_ip
from
jumpcloud_radius_server
where
mfa = 'DISABLED';

List all users that can access the server

Discover the segments that can access a specific server. This is useful in maintaining security and managing user access by identifying who has access to your server.

select
s.name,
s.id,
s.organization,
s.network_source_ip,
ug.display_name as user_name
from
jumpcloud_radius_server as s,
jsonb_array_elements(users) as u
left join jumpcloud_user as ug on u ->> 'id' = ug.id;
select
s.name,
s.id,
s.organization,
s.network_source_ip,
ug.display_name as user_name
from
jumpcloud_radius_server as s,
json_each(s.users) as u
left join jumpcloud_user as ug on json_extract(u.value, '$.id') = ug.id;

Schema for jumpcloud_radius_server

NameTypeOperatorsDescription
_ctxjsonbSteampipe context in JSON form, e.g. connection_name.
idtextThe ID of the server.
mfatextThe MFA status of the server.
nametextThe name of the RADIUS server.
network_source_ipinetThe IP address from which your organization's traffic will originate.
organizationtextThe name of the organization.
organization_idtextSpecifies the ID of the organization.
shared_secrettextThe character string that is configured on both the client hardware and on the RADIUS server.
tag_namesjsonbSpecifies a list of tag names attached with the server.
tagsjsonbA list of tags attached with the server.
titletextTitle of the resource.
user_groupsjsonbA list of user groups associated with the server.
user_lockout_actiontextSpecifies the action to be performed when the user gets locked out.
user_password_expiration_actiontextSpecifies the action to be performed when the user's password gets expired.
usersjsonbA list of users associated with the server.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- jumpcloud

You can pass the configuration to the command with the --config argument:

steampipe_export_jumpcloud --config '<your_config>' jumpcloud_radius_server