I'm looking for some good documentation on PAM for authentication with
radius or with any service. I've only been able to find documentation
that is either brief or out of date. Any good books, or sites
Thanks!
John
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list
[EMAIL PROTECTED] wrote:
I'm looking for some good documentation on PAM for authentication with
radius or with any service. I've only been able to find documentation
that is either brief or out of date. Any good books, or sites
Try the PAM radius authentication module. There's really
Hi Alan,
I edited line 57 and 58 of the Makefile and change to this:
pam_radius_auth.so: pam_radius_auth.o md5.o
ld -shared pam_radius_auth.o md5.o -lpam -lc -o pam_radius_auth.so
then recompile and now it's working...
Thanks a lot
Ogie Dela Cruz
Rogelio Dela Cruz [EMAIL PROTECTED]
Rogelio Dela Cruz [EMAIL PROTECTED] wrote:
I edited line 57 and 58 of the Makefile and change to this:
pam_radius_auth.so: pam_radius_auth.o md5.o
ld -shared pam_radius_auth.o md5.o -lpam -lc -o pam_radius_auth.so
then recompile and now it's working...
That's pretty much what
Rogelio Dela Cruz [EMAIL PROTECTED] wrote:
Anyone been able to use the pam_radius_auth.so module from
www.freeradius.org under Redhat 9?
There were issues with earlier versions of the module in RH 9. The
current one should be OK.
Alan DeKok.
-
List info/subscribe/unsubscribe? See
Hi Alan,
Im using 1.3.16, I compiled using Redhat 8 and it's ok using the same
radius server. But when I compiled/run it under RedHat 9, it doesn't
work. There's no activity in the freeradius debug logging.
Regards,
Rogelio Dela Cruz
Rogelio Dela Cruz [EMAIL PROTECTED] wrote:
Anyone been
Hi
I can't get freeradius 0.9.1 to work with pam auth.
Whenever i try to authenticate and user i get
modcall : entering group authorize
Segmentation fault
Please help
I also tried version 0.9.2 and got the same result
Thanks
Cristi Ungureanu
Cristiung [EMAIL PROTECTED] wrote:
I can't get freeradius 0.9.1 to work with pam auth.
Whenever i try to authenticate and user i get
modcall : entering group authorize
Segmentation fault
Have you read the documentation which comes with the server?
See 'doc/bugs'
Alan DeKok.
-
List
Title: Pam radius module
I am trying to compile the pam radius module under Solaris 8 with gcc and I have glib, binutils and gmake installed but during the make, numerous errors about the headers and source code appear. Has anyone had similar errors? Thanks.
Kenneth Mix [EMAIL PROTECTED] wrote:
I am using the freeradius server to authenticate users into our routers
for managment purposes. When the users are authenticated, freeradius
authorized them at a certain privilege level.
So why do you need PAM?
Are you going to describe what you're
on our
AD domain controller, but I was not able to find any way to assign attribute values to
users within the realm. The only other way I can think of to authenticate users off
of AD while authorizing them via freeradius is to use PAM authentication with the
pam_radius_auth module. I am fairly
in
a packet, and to respond with any other attribute. It even allows you
to check for a realm, and to respond with realm-specific attributes.
The only other way I can think of to authenticate users off of AD
while authorizing them via freeradius is to use PAM authentication
with the pam_radius_auth
On Tue, Sep 23, 2003 at 09:47:33AM -0600, Kenneth Mix wrote:
Currently, when I try to authenticate a user using the PAM RADIUS module, it hangs
my freeradius server at:
pam_pass: using pamauth string radiusd for pam.conf lookup
After this it will not authenticate any other users, no matter
Thank you. I will look into some alternative configurations.
Ken Mix
-Original Message-
From: Frank Cusack [mailto:[EMAIL PROTECTED]
Sent: Tuesday, September 23, 2003 11:08 PM
To: [EMAIL PROTECTED]
Subject: Re: RADIUS PAM Module with RH9.
On Tue, Sep 23, 2003 at 09:47:33AM
Message-
From: Alan DeKok [mailto:[EMAIL PROTECTED]
Sent: Saturday, September 20, 2003 8:19 AM
To: [EMAIL PROTECTED]
Subject: Re: RADIUS PAM Module with RH9.
Kenneth Mix [EMAIL PROTECTED] wrote:
When I am running radiusd -X, it stops at:
pam_pass: using pamauth string radiusd
Kenneth Mix [EMAIL PROTECTED] wrote:
I want to maintain central control for my RADIUS users, with
authentication for certain users happening via IAS. This is the only
way I know of to do it, unless there is another way to specify that
certain users should be authenticated via a different
Thank you.
I realize I am able to proxy, but I still want to be able to control my attribute
settings via my central freeradius server. Is there any reason my PAM-Radius module
would cause freeradius to hang?
Ken Mix
-Original Message-
From: Alan DeKok [mailto:[EMAIL PROTECTED
Kenneth Mix [EMAIL PROTECTED] wrote:
I realize I am able to proxy, but I still want to be able to control my
attribute settings via my central freeradius server.
I have no clue what you mean by that.
Is there any reason my PAM-Radius module would cause freeradius to
hang?
Not that I
22, 2003 4:58 PM
To: [EMAIL PROTECTED]
Subject: Re: RADIUS PAM Module with RH9.
Kenneth Mix [EMAIL PROTECTED] wrote:
I realize I am able to proxy, but I still want to be able
to control my
attribute settings via my central freeradius server.
I have no clue what you mean
Kenneth Mix [EMAIL PROTECTED] wrote:
When I am running radiusd -X, it stops at:
pam_pass: using pamauth string radiusd for pam.conf lookup
Ok... so it's locking somewhere.
After this it will not authenticate any other users, PAM or other.
Also, the PAM module never seems to contact my IAS
Kenneth Mix [EMAIL PROTECTED] wrote:
I am having problems with the PAM RADIUS module on a RedHat 9
server.
An updated version of the module was released today, which should
fix that problem. See the FTP site.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org
I am still unable to authenticate via this PAM module, nor is it logging. I know
freeradius is configured properly, because I can use otehr PAM authentication sources.
Is it possible I misconfigured something? It's a pretty simple config -- here's what
I have:
Server name and secret int
Kenneth Mix [EMAIL PROTECTED] wrote:
Also, freeradius still hangs when I use pam_radius_auth.so for
authentication.
hangs ? What do you mean by that?
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
When I am running radiusd -X, it stops at:
pam_pass: using pamauth string radiusd for pam.conf lookup
After this it will not authenticate any other users, PAM or other. Also, the PAM
module never seems to contact my IAS server.
Thanks,
Ken Mix
-Original Message-
From: Alan DeKok
Christophe Dupre [EMAIL PROTECTED] wrote:
If there are memory leaks, they must not be that big because I've never
noticed any pam-using executable getting that big.
Most PAM programs don't stay around for too long, and most don't do
thousands to millions of PAM requests.
On many platforms
PAM. We have it configured on the
system and it works great for all the other pam-enabled applications
(sshd, login, sudo, etc), but radiusd crashes when provided bad
credential. However, it works if provided good credentials. This is when
testing with radtest:
Ready to process requests
, but now
we'd like to use LDAP auth through PAM.
Why not use LDAP directly? PAM has many issues, including known memory
leaks ( in PAM, not FR ).
-Chris
--
\\\|||/// \ StarNet Inc. \ Chris Parker
\ ~ ~ / \ WX *is* Wireless!\ Director, Engineering
That's my last resort option - I really like the idea of pam - configure
it once, then if/when authentication source changes, only one place
needs to be updated.
If there are memory leaks, they must not be that big because I've never
noticed any pam-using executable getting that big.
Chris
problem back in
June, but no follow-up... So, here's my problem.
I'm running freeradius 0.9.1 (upgraded this morning) on a Solaris 9
machine. Authentication local users works great using rlm_unix, but
now we'd like to use LDAP auth through PAM.
Why not use LDAP directly? PAM has many issues
PROTECTED]
Sent: Tuesday, June 03, 2003 8:49 AM
To: Eric Ferguson
Subject: RE: FW: Pam and Radius 9.0
Eric,
Here's a summary of my troubleshooting efforts with pam_radius_auth.
Feel free
to post this to the mailing list.
The conclusion was that there are memory allocation problems
I saw a couple of messages dated earlier this month referring to the use
of the SecurID PAM module and Freeradius. Does anyone have this working?
If so, can you please tell me how it is configured?
Best Regards,
Roger McClurg
[EMAIL PROTECTED
because RSA SecurID has a PAM module for Linux, but
several of my servers/network devices are RADIUS only, I want to be able
to use my fobs)
I have the PAM module talking to the server so I know it works. Just
confused as to why the Radius Daemon is not chatting to it.
My /etc/pam.d/radiusd looks like
On Mon, Jul 07, 2003 at 04:29:41PM -0700, Chris Jackson wrote:
Do you have any pointers on where to look next or if this is even
possible?
Configure your NAS to do PAP. You are doing CHAP auth, which isn't
compatible with PAM.
/fc
-
List info/subscribe/unsubscribe? See http
Chris Jackson [EMAIL PROTECTED] wrote:
I have the PAM module talking to the server so I know it works. Just
confused as to why the Radius Daemon is not chatting to it.
Because you told it not to.
DEFAULT Auth-Type:=PAM
Fall-Through=Yes
OK...
I get this...
Ready to process
Mark van Kerkwyk [EMAIL PROTECTED] wrote:
Am I missing something really obvious here, there isn't a pam option for
configure that I can see, I hope I am not asking a dumb question here, but
how do I build this with PAM support ?
You need the PAM development tools. Once they exist
On Sun, 29 Jun 2003, Alan DeKok wrote:
but i never saw any pam libs being linked in nor can I see pam_sm*
functions in the code. Maybe I need a different build or a patch, I
pulled down the current 0.81
Reading the output of 'configure' and 'make' is required in
situations like
Hi, does anyone have a working radiusd.conf where both LDAP and PAM are
being used, LDAP for accounts/groups etc and PAM for auth to another
source.
In my case case I will store all credentials in LDAP but send all auth via
pam_krb5 to our kerberos enrivonment. That way I have no passwords
You just want the pam piece? this needs to be radiusd, the auth-file(?)
parameter piece is broken i think. or at least I didnt get it to work
right..
The first part (commented) works but it requires a local user, the second
one works without a local user, and you will want to replace
Hi Sean, thanks for your reply. The bit I was looking for actually was the
radiusd.conf file, which has the correct config for directing
authorization to ldap and authentication to pam.
I have just been doing some testing and i was wondering why it wasn't
working, after an ldd and truss
I configured --with-pam
but i dont think that did any good but i did get it working..
you need this in the radius.conf file and you need the other section in
the users file.
pam {
#
# The name to use for PAM authentication.
# PAM looks
Does anyone have a patch that adds the PAM_RHOST credential info to
Freeradius? ( pam_radius uses it..but that doesnt help me =))
We are trying to implement freeradius but we need the the RHOST stuff
passed via pam so our module can do some authentication based on hostnames
and some other
PROTECTED]
Sent: Tuesday, June 03, 2003 8:49 AM
To: Eric Ferguson
Subject: RE: FW: Pam and Radius 9.0
Eric,
Here's a summary of my troubleshooting efforts with pam_radius_auth.
Feel free
to post this to the mailing list.
The conclusion was that there are memory allocation problems
, May 29, 2003 10:03 AM
To: Eric Ferguson
Cc: FreeRadius
Subject: Re: did you get readhat 9.0 / PAM / Radius working?
Nope, I am still banging away at it. I just haven't figured out all that
has changed in RH9..
Anyone else get this working?
Nick
]
|
| cc: 'FreeRadius' [EMAIL PROTECTED], 'Lee Blakely' [EMAIL
PROTECTED] |
| Subject: RE: did you get readhat 9.0 / PAM / Radius working
] |
| Subject: RE: did you get readhat 9.0 / PAM / Radius working?
|
--|
Hi
hi,
Sorry I meant mod_auth no PAM auth..
---
The question was:
Is there a way to install the FreeRadius PAM Authentication in an already
built and installed Apache (via rpm
How can I know if my pache was built with PX support and module loading ?
-Messaggio originale-
Da: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] conto di Alan Buxey
Inviato: giovedi 29 maggio 2003 15.01
A: [EMAIL PROTECTED]
Oggetto: Re: FreeRadius PAM Authentication question correction
]
|
| cc:
|
| Subject: did you get readhat 9.0 / PAM / Radius working
|
| | |
|-+--
--|
|
| | To: [EMAIL PROTECTED]
| | cc:
| | Subject: did you get readhat 9.0 / PAM / Radius
working
|
| | |
|-+--
--|
|
| | To: [EMAIL PROTECTED]
| | cc:
| | Subject: did you get readhat 9.0 / PAM / Radius
working
|
| | |
|-+--
--|
|
| | To: [EMAIL PROTECTED]
| | cc:
| | Subject: did you get readhat 9.0 / PAM / Radius
working
|
| | |
|-+--
--|
|
| | To: [EMAIL PROTECTED]
| | cc:
| | Subject: did you get readhat 9.0 / PAM / Radius
working
Is there a way to install the FreeRadius PAM Authentication in an already
built and installed Apache (via rpm) or
do I need to get the Apache src and recompile it again ?
Cheers
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Sorry I meant mod_auth no PAM auth..
---
The question was:
Is there a way to install the FreeRadius PAM Authentication in an already
built and installed Apache (via rpm) or
do I
I have PAM Auth setup to authenticate against a W2K
IAS server for ProFTPD users under RedHat 7.1. The authentication is
working but accounting seems to be timing out. Both PAM and IAS are using port
1813 for accounting. Any ideas.
Thanks
Doug Lauterbach
with the server. Im running Red Hat 8, which has a slightly
different PAM setup than previous versions. From my rather limited
understanding of PAM, it looks like almost every application refers back to
/etc/pam.d/system-auth to authenticate. I tried adding the line auth
sufficient /lib/security
I got it to work from the command line. Now I can run radtest from the test workstation and it successfully connects to the server and authenticates the username and password. Im still having trouble with the pam_radius_auth module though. More to the point, Im having trouble with PAM. Here
On Mon, Dec 23, 2002 at 09:04:23PM -0300, Rodolfo Siviero Stein wrote:
To build these files I copy the login pam file and made changes
to system-auth and rename to smb-auth.
Only the radius users need to authenticate in NT Domain local
users are normal passwd/shadow
Hello Guys,
I configured a development server with Free Radius authenticating in a NT
Domain using PAM-winbind. It's working.
When I will install in 2 productions servers, One of then work's too and
the other does not work.
It says that the problem is in the PAM module:
pam_pass
And the PAM configuration is the same on both of these machines? What
account modules are listed in /etc/pam.d/radius (or /etc/pam.d/radiusd?)
on the machine that doesn't work?
To build these files I copy the login pam file and made changes
to system-auth and rename to smb-auth
Rodolfo Siviero Stein [EMAIL PROTECTED] wrote:
Anybody can send me a working radiusd PAM file (my files are above)?
Is this way ( freradius - PAM - pam_smb - NT Domain) the best way to
authenticate these users ? I see in the experimental.conf about a SMB
authication type
Hello guys,
I am trying to configure a freeradius server to authenticate users in an
NT Domain. I am using RedHat 7.3, but I am a newbie with smb related things.
I don't understand PAM very well, so I don't know if my PAM_SMB
configuration is working (I did it using authconfig
On Fri, 1 Nov 2002 10:17:36 -0600
Squire Steve Langasek uttered the following:
On Fri, Nov 01, 2002 at 11:09:41AM -0500, Alan DeKok wrote:
Milan P. Stanic [EMAIL PROTECTED] wrote:
I don't know of any system which ships with a PAM to RADIUS
module.
GNU/Debian 3.0 (Woody
Hi,
Do any of you know if the PAM-Radius module can be used with any compliant Radius
server, or it only works with freeradius?
In the second case, can I configure Freeradius as a proxy and redirect the
authentication to another generic Radius server?
Thanks in advance,
Ricardo
-
List info
Ricardo Gadea [EMAIL PROTECTED] wrote:
Do any of you know if the PAM-Radius module can be used with any compliant
Radius server, or it only works with freeradius?
It works with any RADIUS server.
In the second case, can I configure Freeradius as a proxy and redirect the
authentication
On Thu, Oct 31, 2002 at 11:14:30AM -0500, Alan DeKok wrote:
And the PAM to RADIUS authentication module?
I don't know of any system which ships with a PAM to RADIUS module.
GNU/Debian 3.0 (Woody)
Description
libpam-radius-auth - The PAM RADIUS authentication module.
This is the PAM
Milan P. Stanic [EMAIL PROTECTED] wrote:
I don't know of any system which ships with a PAM to RADIUS module.
GNU/Debian 3.0 (Woody)
Description
...
The module I wrote. That shows the Debian people are perceptive and
wise. :)
Alan DeKok.
-
List info/subscribe/unsubscribe? See
On Fri, Nov 01, 2002 at 11:09:41AM -0500, Alan DeKok wrote:
Milan P. Stanic [EMAIL PROTECTED] wrote:
I don't know of any system which ships with a PAM to RADIUS module.
GNU/Debian 3.0 (Woody)
Description
...
The module I wrote. That shows the Debian people are perceptive
Were any of you succesfull compiling the PAM-Radius module in AIX?
Which version of AIX?
I think AIX 5.x is the first version whith PAM included.
Thanks.
Ricardo
[EMAIL PROTECTED] 11/01/02 01:09PM
Milan P. Stanic [EMAIL PROTECTED] wrote:
I don't know of any system which ships with a PAM
Ricardo Gadea [EMAIL PROTECTED] wrote:
Does anyone now if AIX supports PAM authentication?
Have you tried reading your AIX documentation?
And the PAM to RADIUS authentication module?
I don't know of any system which ships with a PAM to RADIUS module.
Alan DeKok.
-
List info/subscribe
Hi all,
Does anyone now if AIX supports PAM authentication? And the PAM to RADIUS
authentication module?
Thanks!
Ricardo
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
At 03:40 23.10.2002, you wrote:
hi,
using the raddb/users file, the password is in
cleartext on the FR server, what's recommended to
prevent using cleartext file?
by compiling FR to use PAM module?
please enlighten me.
cheers,
yanghwee
hi,
use the crypt-password attribute in your users
hi,
using the raddb/users file, the password is in
cleartext on the FR server, what's recommended to
prevent using cleartext file?
by compiling FR to use PAM module?
please enlighten me.
cheers,
yanghwee
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Sat, Oct 05, 2002 at 02:20:11AM +0300, Kostas Kalevras wrote:
You always set Auth-Type to ldap in your users file. I would suggest something
like this (i haven't tested it though):
authenticate{
pam
ldap
}
authorize {
ldap
files
}
users file
Brendon Colby [EMAIL PROTECTED] wrote:
I have two users. One exists in LDAP, one exists on a Windoze PDC and is
accessed through PAM. With the above setup, when I log in with the LDAP
user, the authorize section returns success but the authenticate section
only tries PAM, which fails
Greetings,
We have a LDAP server with which we want to do authentication. I also
want to use PAM to authenticate (if LDAP user doesn't exist check PAM).
Here is what I have in radius.conf:
authorize {
files
ldap {
notfound = return
}
}
authenticate {
pam
ldap
}
in the users file
On Fri, 4 Oct 2002, Brendon Colby wrote:
Greetings,
We have a LDAP server with which we want to do authentication. I also
want to use PAM to authenticate (if LDAP user doesn't exist check PAM).
Here is what I have in radius.conf:
authorize {
files
ldap {
notfound = return
Hi,
How should I compile freeradius with PAM support? What all library files
will I need?
Any help would be highly appreciated
regards
Krishna
Krishna Shekhar
Network Administrator
Wiplash Wireless
http://www.wiplash.net
-
List info/subscribe/unsubscribe? See http
You might want to check this out:
http://www.freeradius.org/radiusd/doc/PAM
Jon
-Original Message-
From: Krishna [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 31, 2002 4:46 AM
To: [EMAIL PROTECTED]
Subject: Compiling Radius with PAM support??
Hi,
How should I compile
Shekhar
Network Administrator
Wiplash Wireless
http://www.wiplash.net
At 08:14 AM 7/31/02 -0400, you wrote:
You might want to check this out:
http://www.freeradius.org/radiusd/doc/PAM
Jon
-Original Message-
From: Krishna [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 31, 2002 4:46 AM
Hello,
I'm trying to compile freeradius 0.6 with pam support.
I looked in /doc for the options and I couldn't find anything that could
help me...
I guess i have to run:
./configure --with-static-modules=pam
some of the output is:
configure: warning: silently not building rlm_pam.
configure
On Wed, Jul 10, 2002 at 10:23:34AM +0200, Wim wrote:
Hello,
I'm trying to compile freeradius 0.6 with pam support.
I looked in /doc for the options and I couldn't find anything that could
help me...
I guess i have to run:
./configure --with-static-modules=pam
Frank Cusack wrote:
On Wed, Jul 10, 2002 at 10:23:34AM +0200, Wim wrote:
Hello,
I'm trying to compile freeradius 0.6 with pam support.
I looked in /doc for the options and I couldn't find anything that could
help me...
I guess i have to run:
./configure --with-static-modules=pam
Wim [EMAIL PROTECTED] wrote:
I ran configure withou options, the warnings that says
configure: warning: silently not building rlm_pam
is still there... but the make and make install commands are successfull!
Yes and the rlm_pam module isn't installed.
Alan DeKok.
-
List
Hello,
We are using FreeRadius 0.5 with LDAP (ActiveDirectory) Authorization
and Kerberos V (Windows 2k KDC) for authenication, problem we have found
is that pam fails if username is longer than 9 characters. This is the
error message that is displayed:
pam_pass: function pam_acct_mgmt FAILED
On Mon, Jun 24, 2002 at 11:20:22PM +1200, Allister Maguire wrote:
Hello,
We are using FreeRadius 0.5 with LDAP (ActiveDirectory) Authorization
and Kerberos V (Windows 2k KDC) for authenication, problem we have found
is that pam fails if username is longer than 9 characters
On Wed, 29 May 2002, Michael Fuller wrote:
Hi all,
I am trying to get both authentication and authorisation through LDAP. While
authentication works, authorisation still evades me. Ideas anybody ?
Regards,
Michael Fuller
authorize{
files
ldap
}
What is the problem you
On Tue, 28 May 2002, Allister Maguire wrote:
Hello,
I have got this working by setting:
DEFAULT Auth-Type := pam
Fall-Through = 1
In the users file.
I also want to restrict dialin access to certain ldap users, so I
changed the ldap filter:
filter = ((uid=%u)(msNPAllowDialin
Greetings,
I have just finished configuring Redhat 7.3 with winbind to authenticate off of
our NT 4.0 PDC via winbind and ran into a problem with the username/password
handoff. It seems that the first letter is getting cut off when attempting to
authenticate through PAM to the PDC. When you
, 2002 5:14 PM
Subject: Re: Authorization via LDAP Authentication via PAM
On Tue, 28 May 2002, Allister Maguire wrote:
Hello,
I have got this working by setting:
DEFAULT Auth-Type := pam
Fall-Through = 1
In the users file.
I also want to restrict dialin access to certain
Hello,
I have got this working by setting:
DEFAULT Auth-Type := pam
Fall-Through = 1
In the users file.
I also want to restrict dialin access to certain ldap users, so I
changed the ldap filter:
filter = ((uid=%u)(msNPAllowDialin=TRUE))
In the ldap {} module.
Only problem is if I
, 2002 4:33 PM
Subject: PPPoE: auth+acct via PAM
Hello freeradius-users.
I use rp-pppoe to serve PPPoE users. Well, I think use FR with it is a good
idea, but cannot imagine which lines in /etc/pam.d/ppp I need. It is
right -- libpam-freeradius-auth cannot help my efforts to log
time
Ilja A Marchew [EMAIL PROTECTED] wrote:
I use rp-pppoe to serve PPPoE users. Well, I think use FR with it is a good
idea, but cannot imagine which lines in /etc/pam.d/ppp I need. It is
right -- libpam-freeradius-auth
There is no such thing. There *is* the pam_radius_auth module, but
Hello,
In the radiusd.conf file you have the choice of specifing what Modules
are used to:
authorize {
preprocess
suffix
ldap
}
And
authenticate {
pam
}
Is it posible to authorize via Ldap (Active Directory, including all
radius attributes) and authenticate
not a
developer but there are people here that will work on the source
code. Any changes will be submiteed to the freeradius community.
It should be straightforward. Add a field to the configuration file
(or to the PAM options) to define the realm. Once you have that, then
before adding
I get a fatal error while trying to make pam. Here's the output, any
assistance would be greatly appreciated.
root 72 % = cd pam_radius-1.3.14/
root 73 % = ls
./ INSTALLTODO md5.c
pam_radius_auth.conf
../Makefile
I'm using Sun's ld ( /usr/ccs/bin/ld ). Thank you, changing the value to
-Gshareable in the Makefile did the trick.
-Original Message-
From: Chris Parker [mailto:[EMAIL PROTECTED]]
Sent: 25 April 2002 11:02 AM
To: [EMAIL PROTECTED]
Subject: Re: Error making Pam radius on Solaris 7
[blah blah blah...]
Making static dynamic in rlm_krb5...
gmake[6]: Entering directory
`/usr/src/freeradius-0.5/src/modules/rlm_krb5'
gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall
-D_GNU_SOURCE
-DNDEBUG -I../../include -c rlm_krb5.c -o rlm_krb5.o
rlm_krb5.c:39:18: krb5.h: No
PAM itself doesn't care about local vs. non-local accounts.
If you're
having trouble with this, you almost certainly have a module
in your PAM
config which you shouldn't -- such as pam_unix, which by definition
requires local accounts and will give you a failure for anything else
On Wed, Apr 10, 2002 at 08:33:58AM -0500, McNutt, Justin M. wrote:
PAM itself doesn't care about local vs. non-local accounts.
If you're
having trouble with this, you almost certainly have a module
in your PAM
config which you shouldn't -- such as pam_unix, which by definition
1 - 100 of 114 matches
Mail list logo
