Re: (RADIATOR) Sendmail Radiator

1999-08-08 Thread Valentin Tumarkin


  I think your problem is that your 'system' does not know of your users 
existence. Having configured PAM is not enough, you need to make your
unix 'system' aware of your users via Name Service. 

Example: If you are using LDAP, you can install the nss_ldap module
from http://www.padl.com
And then put something like this in /etc/nsswitch.conf
(Solaris,Linux)

passwd: files   ldap
shadow: files   ldap
group:  files   ldap


 Date: Sat, 07 Aug 1999 23:33:54 +
 From: Paul Black [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: (RADIATOR) Sendmail  Radiator
 
 I've now got my POP server authenticating from Radiator and I thought I would
 be ready to go ahead and use authentication from a database. When I tried to
 send an email to a test user in the Radiator database I received an error
 message from sendmail. The message said that the test user did not exist, ie
 he was not in the password file.
 
 Has anyone come across this problem before and managed to solve it?
 
 Regards.  Paul
 
 ===
 Archive at http://www.thesite.com.au/~radiator/
 To unsubscribe, email '[EMAIL PROTECTED]' with
 'unsubscribe radiator' in the body of the message.
 



Valentin Tumarkin

Xpert Trusted Systems


===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Sendmail Radiator

1999-08-08 Thread Paul Black

This sounds interesting. Does the NSS/LDAP module support PAM, ie, can it be
made to authenticate via Radiator? I'm trying to setup a system where the
Radiator database is the source of customer authentication information. Thanks
for your help.

Regards.  Paul



Valentin Tumarkin wrote:
 
   I think your problem is that your 'system' does not know of your users
 existence. Having configured PAM is not enough, you need to make your
 unix 'system' aware of your users via Name Service.
 
 Example: If you are using LDAP, you can install the nss_ldap module
 from http://www.padl.com
 And then put something like this in /etc/nsswitch.conf
 (Solaris,Linux)
 
 passwd: files   ldap
 shadow: files   ldap
 group:  files   ldap
 
  Date: Sat, 07 Aug 1999 23:33:54 +
  From: Paul Black [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Subject: (RADIATOR) Sendmail  Radiator
 
  I've now got my POP server authenticating from Radiator and I thought I would
  be ready to go ahead and use authentication from a database. When I tried to
  send an email to a test user in the Radiator database I received an error
  message from sendmail. The message said that the test user did not exist, ie
  he was not in the password file.
 
  Has anyone come across this problem before and managed to solve it?
 
  Regards.  Paul
 
  ===
  Archive at http://www.thesite.com.au/~radiator/
  To unsubscribe, email '[EMAIL PROTECTED]' with
  'unsubscribe radiator' in the body of the message.
 
 
 Valentin Tumarkin
 
 Xpert Trusted Systems

===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Sendmail Radiator

1999-08-08 Thread Valentin Tumarkin


No.

PAM is a library for authentication. PAM takes information from NSS,
and not vice-versa.

To make it simple: it's not enough to have your users in the radius
database, you should also put them in /etc/passwd or NIS or 
LDAP database+nss_ldap modules.


About NSS from Solaris 2.6 nsswitch.conf(4) man page:

 The operating system uses a number of "databases" of  infor-
 mation  about  hosts,  users  (passwd/shadow), groups and so
 forth.  Data for these can come from a variety  of  sources:
 host-names  and host-addresses, for example, may be found in
 /etc/hosts, NIS, NIS+, or DNS.  Zero or more sources may  be
 used  for  each database; the sources and their lookup order
 are specified in the /etc/nsswitch.conf file.


Example:
NSS is responsible for translating usernames to numeric user-id's
and back. PAM does not know anything about that.


You should really go read the man pages and the documentation at
http://www.padl.com


On Sun, 8 Aug 1999, Paul Black wrote:

 Date: Sun, 08 Aug 1999 11:58:05 +
 From: Paul Black [EMAIL PROTECTED]
 To: Valentin Tumarkin [EMAIL PROTECTED], [EMAIL PROTECTED]
 Subject: Re: (RADIATOR) Sendmail  Radiator
 
 This sounds interesting. Does the NSS/LDAP module support PAM, ie, can it be
 made to authenticate via Radiator? I'm trying to setup a system where the
 Radiator database is the source of customer authentication information. Thanks
 for your help.
 
 Regards.  Paul
 
 
 
 Valentin Tumarkin wrote:
  
I think your problem is that your 'system' does not know of your users
  existence. Having configured PAM is not enough, you need to make your
  unix 'system' aware of your users via Name Service.
  
  Example: If you are using LDAP, you can install the nss_ldap module
  from http://www.padl.com
  And then put something like this in /etc/nsswitch.conf
  (Solaris,Linux)
  
  passwd: files   ldap
  shadow: files   ldap
  group:  files   ldap
  
   Date: Sat, 07 Aug 1999 23:33:54 +
   From: Paul Black [EMAIL PROTECTED]
   To: [EMAIL PROTECTED]
   Subject: (RADIATOR) Sendmail  Radiator
  
   I've now got my POP server authenticating from Radiator and I thought I would
   be ready to go ahead and use authentication from a database. When I tried to
   send an email to a test user in the Radiator database I received an error
   message from sendmail. The message said that the test user did not exist, ie
   he was not in the password file.
  
   Has anyone come across this problem before and managed to solve it?
  
   Regards.  Paul
  
   ===
   Archive at http://www.thesite.com.au/~radiator/
   To unsubscribe, email '[EMAIL PROTECTED]' with
   'unsubscribe radiator' in the body of the message.
  
  
  Valentin Tumarkin
  
  Xpert Trusted Systems
 


===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Sendmail Radiator

1999-08-07 Thread Paul Black

 Hey, just curious here.  Why do you want people to authenticate from
 Radiator instead of the password file?
 
 I'm just curious, I don't know what your problem is.  Thinking you might
 have a neat application I haven't thought of...

Hi Chris,

I'm using Radmin which has a nice www interface, it easy for my support reps
to add new users. Radmin only supports authentication from the database. 

Authentication from the database gives me on point to set the access policies
for my whole system.

These are the sort of things that make the use of a database attractive.
Sendmail does not appear to know about PAM though, unless there is a patch I
don't know about.

Cheers.  Paul

===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.