Ahhhhh ...

Thank you very much. That did the trick!

Mayhaps this should be added to the docs  and/or the comments of the 
.conf file?

Cheers,

Tom

Roy Hooper wrote:

>Because FreeBSD doesn't support shadow passwords, if I remember the code
>correctly, you have to comment out passwd= and shadow= to get system password
>file authentication that uses master.passwd.  The caching is unnecessary for
>the FreeBSD system password file as it is a berkeley DB file that drives the
>getpw*() functions.
>
>---
>Roy Hooper
>Project Manager & Senior UNIX Consultant
>Decisive Technologies, Inc.
>[EMAIL PROTECTED]
>
>
>----- Original Message -----
>From: "Thomas Keitel" <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>
>Sent: Tuesday, March 12, 2002 8:23 PM
>Subject: Re: /etc/passwd / System auth not working
>
>
>>Hello Again,
>>
>>Everything in the config is stock except for:
>>
>>                #
>>                #  Cache /etc/passwd, /etc/shadow, and /etc/group
>>                #
>>                #  The default is to NOT cache them.  However, caching
>>them can
>>                #  speed up system authentications by a substantial amount.
>>                #
>>                # allowed values: {no, yes}
>>                cache = no
>>                # Reload the cache every 600 seconds (10mins). 0 to disable.
>>                cache_reload = 600
>>
>>                #
>>                #  Define the locations of the normal passwd, shadow, and
>>                #  group files.
>>                #
>>                #  'shadow' is commented out by default, because not all
>>                #  systems have shadow passwords.
>>                #
>>                passwd = /etc/passwd
>>                shadow = /etc/master.passwd
>>                group = /etc/group
>>
>>
>>                #
>>                #  Where the 'wtmp' file is located.
>>                #  This will be moved to it's own module soon..
>>                #
>>                radwtmp = ${logdir}/radwtmp
>>        }
>>
>>Switched to running radius as root, but is there a way to use system
>>auth w/o this? Perhaps running as username radius?
>>
>>Thanks,
>>
>>Tom
>>
>>
>>
>>
>>Roy Hooper wrote:
>>
>>>Are you running the server as root?
>>>Are you running without passwd and shadow set in the unix configuration
>>>block?
>>>
>>>Why don't you post your config file, and then I'll peruse the code to see
>>>what might be getting in the way if it is not a config error.
>>>
>>>--
>>>Roy Hooper
>>>Project Manager & Senior UNIX Consultant
>>>Decisive Technologies Inc.
>>>
>>>
>>>----- Original Message -----
>>>From: "Thomas Keitel" <[EMAIL PROTECTED]>
>>>To: <[EMAIL PROTECTED]>
>>>Sent: Tuesday, March 12, 2002 6:14 PM
>>>Subject: /etc/passwd / System auth not working
>>>
>>>
>>>Hello All,
>>>
>>>New to the list. I have the faq and googled this to tears but, I have
>>>having a hard time getting freeradius .4 to correctly auth users against
>>>the FreeBSD 4.5 passwd file. The password is correct and I am at a loss.
>>>
>>>Thanks,
>>>
>>>Tom
>>>
>>>radius.log:
>>>
>>>Message:    Auth: rlm_unix : [jdoe]: invalid password
>>>Message:    Auth: Login incorrect: [jdoe/jdspw] (from nas UNKOWN-NAS port 1)
>>>
>>>
>>>radiusd debug:
>>>
>>>modcall: entering group authorize
>>> modcall[authorize]: module "preprocess" returns ok
>>> modcall[authorize]: module "suffix" returns ok
>>>   users: Matched DEFAULT at 145
>>> modcall[authorize]: module "files" returns ok
>>>modcall: group authorize returns ok
>>> rad_check_password:  Found Auth-Type System
>>>auth: type "System"
>>>modcall: entering group authenticate
>>>rlm_unix: [jdoe]: invalid password
>>> modcall[authenticate]: module "unix" returns reject
>>>modcall: group authenticate returns reject
>>>auth: Failed to validate the user.
>>>
>>>
>>>
>>>
>>>
>>>-
>>>List info/subscribe/unsubscribe? See
>>>http://www.freeradius.org/list/users.html
>>>
>>>
>>>
>>>
>>>-
>>>List info/subscribe/unsubscribe? See
>>>
>http://www.freeradius.org/list/users.html
>
>>>
>>
>>
>>-
>>List info/subscribe/unsubscribe? See
>>
>http://www.freeradius.org/list/users.html
>
>
>
>
>- 
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
>



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to