Re: PAM_RADIUS_AUTH setip on RHEL Linux 32 bit

2005-06-14 Thread Alan DeKok
"Talwar, Puneet (NIH/NIAID)" <[EMAIL PROTECTED]> wrote:
> Well ok, would it be possible to see some examples of some pam file setting
> for RH environment?  I think I am not setting the right pam modules.

  The module ships with configuration examples.  From what you've been
saying, 99% of what you've done is correct.  You just can't understand
what to put into /etc/raddb/server, even though the examples are right
in front of you.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: PAM_RADIUS_AUTH setip on RHEL Linux 32 bit

2005-06-14 Thread Talwar, Puneet (NIH/NIAID)
Well ok, would it be possible to see some examples of some pam file setting
for RH environment?  I think I am not setting the right pam modules.



Thanks,

__

 

Puneet Talwar

Contractor/CIPS

UNIX Administrator

301-451-9971

( c ) 301-252-5366

 



Disclaimer: 

The information in this e-mail and any of its attachments is confidential
and may contain sensitive information. It should not be used by anyone who
is not the original intended recipient. If you have received this e-mail in
error please inform the sender and delete it from your mailbox or any other
storage devices. The National Institute of Allergy and Infectious Diseases
(NIAID) shall not accept liability for any statement made that are the
sender's own and not expressly made on behalf of the NIAID by one of its
representatives.


-Original Message-
From: Alan DeKok [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, June 14, 2005 2:57 PM
To: FreeRadius users mailing list
Subject: Re: PAM_RADIUS_AUTH setip on RHEL Linux 32 bit 

"Talwar, Puneet (NIH/NIAID)" <[EMAIL PROTECTED]> wrote:
> Here is the full content of the file.
...
> IP Address   Secret_Key3

  That line is NONSENSE.  If it's actually in your configuration file,
it WON'T WORK.

  You have to list the IP address, not the text "IP Address".  See the
line just above this one, which gives an example ot what to do.

  Alan DeKok.
- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: PAM_RADIUS_AUTH setip on RHEL Linux 32 bit

2005-06-14 Thread Alan DeKok
"Talwar, Puneet (NIH/NIAID)" <[EMAIL PROTECTED]> wrote:
> Here is the full content of the file.
...
> IP Address   Secret_Key3

  That line is NONSENSE.  If it's actually in your configuration file,
it WON'T WORK.

  You have to list the IP address, not the text "IP Address".  See the
line just above this one, which gives an example ot what to do.

  Alan DeKok.
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: PAM_RADIUS_AUTH setip on RHEL Linux 32 bit

2005-06-14 Thread Talwar, Puneet (NIH/NIAID)
Sorry about that,

Here is the full content of the file.

# cat pam_radius_auth.conf

#  pam_radius_auth configuration file.  Copy to: /etc/raddb/server
#
#  For proper security, this file SHOULD have permissions 0600,
#  that is readable by root, and NO ONE else.  If anyone other than
#  root can read this file, then they can spoof responses from the server!
#
#  There are 3 fields per line in this file.  There may be multiple
#  lines.  Blank lines or lines beginning with '#' are treated as
#  comments, and are ignored.  The fields are:
#
#  server[:port] secret [timeout]
#
#  the port name or number is optional.  The default port name is
#  "radius", and is looked up from /etc/services The timeout field is
#  optional.  The default timeout is 3 seconds.
#
#  If multiple RADIUS server lines exist, they are tried in order.  The
#  first server to return success or failure causes the module to return
#  success or failure.  Only if a server fails to response is it skipped,
#  and the next server in turn is used.
#
#  The timeout field controls how many seconds the module waits before
#  deciding that the server has failed to respond.

# server[:port] shared_secret  timeout (s)
#127.0.0.1  secret 1
IP Address   Secret_Key3
#
# having localhost in your radius configuration is a Good Thing.
#
# See the INSTALL file for pam.conf hints.


-Original Message-
From: Alan DeKok [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, June 14, 2005 12:48 PM
To: FreeRadius users mailing list
Subject: Re: PAM_RADIUS_AUTH setip on RHEL Linux 32 bit 

"Talwar, Puneet (NIH/NIAID)" <[EMAIL PROTECTED]> wrote:
> Here is the content of the pam_radius_auth.conf file and yes it does exist
> in /etc/raddb/server folder.
> 
> # server[:port] shared_secret  timeout (s)
> #127.0.0.1  secret 1
> IP Address   Secret_Key3

  Either you've edited it so much as to be useless, or you're using
that file as-is.  Either way, I have no idea what the ACTUAL contents
of the file is, and therefore I have no way to help you.

  If you don't know how to fix the problem on your own, any editing of
the configuration files you do before posting them here is guaranteed
to make those files useless.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: PAM_RADIUS_AUTH setip on RHEL Linux 32 bit

2005-06-14 Thread Alan DeKok
"Talwar, Puneet (NIH/NIAID)" <[EMAIL PROTECTED]> wrote:
> Here is the content of the pam_radius_auth.conf file and yes it does exist
> in /etc/raddb/server folder.
> 
> # server[:port] shared_secret  timeout (s)
> #127.0.0.1  secret 1
> IP Address   Secret_Key3

  Either you've edited it so much as to be useless, or you're using
that file as-is.  Either way, I have no idea what the ACTUAL contents
of the file is, and therefore I have no way to help you.

  If you don't know how to fix the problem on your own, any editing of
the configuration files you do before posting them here is guaranteed
to make those files useless.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: PAM_RADIUS_AUTH setip on RHEL Linux 32 bit

2005-06-14 Thread Talwar, Puneet (NIH/NIAID)
Here is the content of the pam_radius_auth.conf file and yes it does exist
in /etc/raddb/server folder.



# server[:port] shared_secret  timeout (s)
#127.0.0.1  secret 1
IP Address   Secret_Key3



-Original Message-
From: Alan DeKok [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, June 14, 2005 11:16 AM
To: FreeRadius users mailing list
Subject: Re: PAM_RADIUS_AUTH setip on RHEL Linux 32 bit 

"Talwar, Puneet (NIH/NIAID)" <[EMAIL PROTECTED]> wrote:
> I was able to get the vsftpd working, I can
> authenticate but when I go check to the /var/log/messages  I see the
> following message.
> 
> vsftpd[X]: pam_radius_auth: No RADIUS server found in configuration
file
> /etc/raddb/server

  So... what's the content of that file?  Does it even exist?

  Alan DeKok.
- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: PAM_RADIUS_AUTH setip on RHEL Linux 32 bit

2005-06-14 Thread Alan DeKok
"Talwar, Puneet (NIH/NIAID)" <[EMAIL PROTECTED]> wrote:
> I was able to get the vsftpd working, I can
> authenticate but when I go check to the /var/log/messages  I see the
> following message.
> 
> vsftpd[X]: pam_radius_auth: No RADIUS server found in configuration file
> /etc/raddb/server

  So... what's the content of that file?  Does it even exist?

  Alan DeKok.
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html