[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

RE: pam radius




> -----Original Message-----
> From: Orlando Andico [mailto:orly@mozcom.com]
> Sent: Monday, 29 March 1999 13:12
> To: Richard Lennerts
> Cc: pam-list@redhat.com
> Subject: RE: pam radius
>
>
> On Mon, 29 Mar 1999, Richard Lennerts wrote:
>
> ..
> > > Does the current pam_radius authenticate as well as account?
> > > the version
> > > which comes with red hat 5.2 only does accounting..
> >
> > No. I believe Christian Gafton rolled radius auth and
> accounting into
> > pam_pwdb.
>
> Is this in the latest pam tarball? (Linux-PAM-0.66)

I believe so. RedHat Linux comes standard with PAM authentication using
pam_pwdb. It was in 0.64 but I haven't checked 0.66.

>
> ..
> > yes. This is what I do. you can use nss_pwdb in conjunction
> with pam_pwdb.
> > You will need to modify things slightly to do authorisation
> properly (ie.
> > sendmail needs to check if a user exists, to do this you
> don't need to
> > authenticate the user but normally radius requires a
> password) There are
> > several ways you can do this. You can either kludge a password for
> > authorisation style requests or create a special attribute
> for radius to
> > handle these kind of requests, which is what we have done.
> You will also
> ..
>
> Do you have any experience in doing this under Solaris 2.6/2.7? I know
> this is the Linux-PAM list but our production machines run Solaris and
> we'll have to eventually implement on that platform.

I have only done this on Linux, however the mods needed were nothing
platform specific. Does Solaris even have NSS or something equivalent?

Regards,


Richard



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index] []