hey
i'm still looking at this... last thing I done was to try to use
/usr/lib/security/pam_sample.so.1 as the PAM library (a sample dummy PAM)
with always_succeed as a flag. Now it does work so this might be a Solaris
problem...
----- Original Message -----
>
> hi there
>
> we've been trying to authenticate using PAM aroud here. The radius we're
> using in the production system (SUN) is working fine with this PAM, but
> we're getting:
>
> -> on /var/adm/messages:
>
> Jun 28 17:53:13 marmot radiusd[15853]: load_modules: can not open module
> /opt/tprm/lib/libtprm.so.3.0.3.2
>
>
> -> on radiator's debug:
>
> *** Received from 10.41.1.26 port 57967 ....
> Code: Access-Request
> Identifier: 19
> Authentic: 1234567890123456
> Attributes:
> User-Name = "nc45934a"
> Service-Type = Framed-User
> NAS-IP-Address = 193.136.132.2
> NAS-Port = 1234
> NAS-Port-Type = Async
> User-Password =
> "<136><233>5<197><223>,m<207><188>8<9><160><216>}x<153>"
>
> Wed Jun 28 17:53:29 2000: DEBUG: Handling request with Handler
> 'Realm=DEFAULT'
> Wed Jun 28 17:53:29 2000: DEBUG: Deleting session for nc45934a,
> 193.136.132.2, 1234
> Wed Jun 28 17:53:29 2000: DEBUG: Handling with PAM service radiatortest
> Wed Jun 28 17:53:29 2000: INFO: Access rejected for nc45934a: Dlopen
> failure
> Wed Jun 28 17:53:29 2000: DEBUG: Packet dump:
> *** Sending to 10.41.1.26 port 57967 ....
> Code: Access-Reject
> Identifier: 19
> Authentic: 1234567890123456
> Attributes:
> Reply-Message = "Request Denied"
>
>
>
> this is /etc/pam.conf
>
> (snip)
> radiatortest auth required /opt/tprm/lib/libtprm.so.3.0.3.2
> radiatortest account required /opt/tprm/lib/libtprm.so.3.0.3.2
> radiatortest session required /opt/tprm/lib/libtprm.so.3.0.3.2
> (snip)
>
> and this is radius.conf
>
> (snip)
> <Realm DEFAULT>
> <AuthBy PAM>
> Service radiatortest
> </AuthBy>
> # Log accounting to the detail file in LogDir
> AcctLogFileName %L/radacct/%N/detail
> </Realm>
> (snip)
>
> any ideas ?
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
