Re: PAM-Radius authentication issue on Ubuntu 7.4: can not authenticate SSH users not present in /etc/passwd

2009-03-24 Thread Alan DeKok
Hu, Fengliang (Procurve Networking) wrote: I did some research from the website and some emails dated in 2006 said that PAM_Radius can only authenticate user accounts in /etc/passwd file. Is that right? Yes. There is no documented way in PAM to get UID/GID/etc from the PAM module (e.g.

PAM-Radius authentication issue on Ubuntu 7.4: can not authenticate SSH users not present in /etc/passwd

2009-03-19 Thread Hu, Fengliang (Procurve Networking)
Hi, I was trying to find a PAM-Radius mailing list and it seems that this is the best one. A Ubuntu 7.4 box needs to be configured such that SSH users will be authenticated against an external FreeRadius server. FreeRadius server version is 1.1.7-1build4. The Ubuntu box uses OpenSSH 4.3-p2

Re: PAM Radius Authentication

2007-04-19 Thread Reza Behroozi
Hi can u tell me how run radius with pam? thanks On 4/19/07, daniel [EMAIL PROTECTED] wrote: Ok, I have gotten pam_radius_auth.so to work and it is working well, however, is there any way to get it to create a UID when it receives an auth accept? At the moment I have to run adduser every time

Re: PAM Radius Authentication

2007-04-19 Thread Alan DeKok
daniel wrote: If I use LDAP to authenticate with PAM and freeradius authenticates against LDAP as well am I able to still store session details with LDAP? I believe so, yes. I am trying to integrate my current hotspot database with my terminals so that users can authenticate on either

Re: PAM Radius Authentication

2007-04-17 Thread daniel
Has anyone had any luck compiling pam_radius_auth on ubuntu? On Mon, 16 Apr 2007 15:13:49 +0200, Alan DeKok [EMAIL PROTECTED] wrote: daniel wrote: I am trying to set up unix authentication using radius. Does the pam module support the maximum session times. No, because PAM has no

Re: PAM Radius Authentication

2007-04-17 Thread Alan DeKok
daniel wrote: Has anyone had any luck compiling pam_radius_auth on ubuntu? $ apt-get install libpam0g-dev $ cd pam_radius $ make Does the pam module support accounting packets (ie. send accounting packet to radius when user logs on?) Yes. Alan DeKok. -- http://deployingradius.com

Re: PAM Radius Authentication

2007-04-16 Thread Alan DeKok
daniel wrote: Apr 15 22:03:51 bill sshd[7861]: PAM unable to dlopen(/lib/security/pam_radius_auth.so) Apr 15 22:03:51 bill sshd[7861]: PAM [dlerror: /lib/security/pam_radius_auth.so: undefined symbol: __stack_chk_fail_local] You've built the module with stack overflow checking turned on,

Re: PAM Radius Authentication

2007-04-16 Thread daniel
Alan, Thankyou, how do I build the module with stack overflow checking turned off, also what library do I need to link it to? Regards, Daniel Davis On Mon, 16 Apr 2007 11:15:59 +0200, Alan DeKok [EMAIL PROTECTED] wrote: daniel wrote: Apr 15 22:03:51 bill sshd[7861]: PAM unable to

Re: PAM Radius Authentication

2007-04-16 Thread Alan DeKok
daniel wrote: Thankyou, how do I build the module with stack overflow checking turned off, also what library do I need to link it to? I have no idea. Stack checking is part of your local system, not part of the module. Alan DeKok. -- http://deployingradius.com - The web site of

Re: PAM Radius Authentication

2007-04-16 Thread robinson santos
Alan, I dont know if someone could help me, i got FR working and authenticating in my AD. Here in my core switch a (Cisco 4507R) i have around 7 vlans, i was wondering if someone could explain to me how could i use FR and my switch to use a different vlan based in the user, and if is a guest

Re: PAM Radius Authentication

2007-04-16 Thread daniel
Alan, I am trying to set up unix authentication using radius. Does the pam module support the maximum session times. I am trying to set up a system where linux users authenticate against my existing radius hotspot system and they are forced to log out when their session expires. Regards,

Re: PAM Radius Authentication

2007-04-16 Thread Alan DeKok
daniel wrote: I am trying to set up unix authentication using radius. Does the pam module support the maximum session times. No, because PAM has no provisions for enforcing maximum session times. The setrlimit function call can enforce CPU time restrictions, but that is *not* clock time.

PAM Radius Authentication

2007-04-15 Thread daniel
Hi, I have been trying to set up the pam_radius_auth pam module to authenticate my users through my freeradius server. The radius server is working fine as I can get and Access-Accept packet with radtest and also my wireless hotspot authenticates fine through it. The problem I have is that

Re: Pam radius authentication

2006-10-20 Thread danieldinu
Isn't there anyone who tried this implementation? Hi! if you are reffering to this line: account required pam_radius_auth.so debug than here is the explanation: The pam configuration can be: ... auth sufficient /lib/security/pam_radius_auth.so [options] ... accountsufficient

Re: Pam radius authentication

2006-10-17 Thread danieldinu
First of all, thank you for your reply. Until now, you are the only one. Now, let's take it step by step: This is a part of INSTALL: ** Redhat Linux 5.0 **

Re: Pam radius authentication

2006-10-17 Thread A . L . M . Buxey
Hi, I don't understand why you are saying that you are invoking pam_radius_auth in the wrong place and for the wrong reason...please, be more specific and if you know the right configuration, enlight me! #%PAM-1.0 auth required pam_securetty.so auth sufficient

Re: Pam radius authentication

2006-10-17 Thread danieldinu
Hi! if you are reffering to this line: account required pam_radius_auth.so debug than here is the explanation: The pam configuration can be: ... auth sufficient /lib/security/pam_radius_auth.so [options] ... accountsufficient /lib/security/pam_radius_auth.so (this is taken from

Re: Pam radius authentication

2006-10-16 Thread danieldinu
anyone??? pls!!! no suggestions at all ? :( Pe 12 Oct 2006, la 12:46, [EMAIL PROTECTED] a scris: Hello! I try to authenticate ssh users logins using pam_radius_auth.so. On my RedHat 9 I have the following setup: - freeradius server - users file: testAuth-Type := Local,

Re: Pam radius authentication

2006-10-16 Thread A . L . M . Buxey
Hi, anyone??? pls!!! no suggestions at all ? :( I'd read the INSTALL doc that coems as part of the pam_radius tool. - cat /etc/pam.d/sshd #%PAM-1.0 auth required pam_securetty.so auth sufficient pam_radius_auth.so debug auth required

Pam radius authentication

2006-10-12 Thread danieldinu
Hello! I try to authenticate ssh users logins using pam_radius_auth.so. On my RedHat 9 I have the following setup: - freeradius server - users file: testAuth-Type := Local, User-Password == test - clients.conf client 127.0.0.1 { secret =