Hi, > When starting radiusd -X (yes, I've looked at the output) and testing these > 2 most simple accounts with radtest, the first one fails while the second one > works. The difference being that there's a "mrichard" account on the box in > /etc/passwd while "mrichard2" only exists in radiusd's config. Hence the > output differences when calling "radtest thelogin qwerty localhost 666 > testing123" (cut) :
you've massively edited the output of the debug and missed the most important line that says [unix] returns updated or somesuch - however: > After a bit of searching I found a reference in the ML archives to > $confdir/sites-enabled/default and saw "unix" in there with the description > saying it caches the hashes from /etc/passwd and its accompanying shadow. > I've commented those lines and restarted the daemon. Now I get this in the > PAP output for both users: ...you are on the right track. but once again, a few lines of the debug isnt enough. there is plenty in the debug that says whats wrong etc. obviously you are editing the right config files because its broken what was working in a different fashion before. you need to remove unix from the 3 sections in the default file. then passwords wont be read. but you need to ensure that files is called before pap in the authorize section alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

