Re: CentOS 6.3 and FreeRadius - can't authenticate to Unix

2012-10-30 Thread Alan DeKok
Jacobs, Joseph wrote: I’m trying to set up Freeradius to authenticate against the local Linux user accounts. .. joe2 Auth-Type := System (I’ve tried this with both := and =) Don't do that. bob Cleartext-Password := hello OK. Then: [files] users: Matched entry bob at line 8

Re: CentOS 6.3 and FreeRadius - can't authenticate to Unix

2012-10-30 Thread Fajar A. Nugraha
On Tue, Oct 30, 2012 at 2:04 PM, Alan DeKok al...@deployingradius.com wrote: ++[unix] returns notfound That's pretty definitive. The user isn't in /etc/passwd, or /etc/shadow. Or, the server can't read it. What's the recommended method for authenticating against Linux system users? I

Re: CentOS 6.3 and FreeRadius - can't authenticate to Unix

2012-10-30 Thread Alan DeKok
Fajar A. Nugraha wrote: What's the recommended method for authenticating against Linux system users? I thought pam was the better one? Maybe. getpwent() or getspwent() should work. Also, is the big warning still valid? Likely, yes. I've been avoiding PAM for nearly a decade now. It's

Re: CentOS 6.3 and FreeRadius - can't authenticate to Unix

2012-10-30 Thread John Dennis
On 10/30/2012 03:23 AM, Alan DeKok wrote: Fajar A. Nugraha wrote: What's the recommended method for authenticating against Linux system users? I thought pam was the better one? Maybe. getpwent() or getspwent() should work. Also, is the big warning still valid? Likely, yes. I've

Re: CentOS 6.3 and FreeRadius - can't authenticate to Unix

2012-10-29 Thread John Dennis
Read the getting started how-to's found here: http://deployingradius.com/ Read the documentation in /etc/raddb/sites-enabled/default paying attention to which module reads passwords out of /etc/shadow Read the debug output, especially lines that begin with WARNING! Do not force Auth-Type in