Freeradius and SSH

[Bona]

Hi all

I am trying to implement Freeradius in production environment. I have a couple questions:

Here is the config:

1 - Corporate users and bastion host are on different legs of the same firewall (Same building)
2 - Production Network is on the other side of the firewall and in geograpgically different area.
3 - User ssh to the bastion host
and from the bastion host, they ssh in the production server as root.

Goal:

1 - Avoid to have each user using root and provide accounting for each user. But still use ssh to connect to production machine.
2 - Implement freeradius to satisfy this requirement.

Question:

1 - Where would I install Freeradius radius?
2 - How would the NAS intercept the login info and forward it to Freeradius.
3 - How doea freeradius handle ssh

Best

Bona

---

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html