Re: User /etc/shadow for Authentication

2007-04-26 Thread Norman Zhang
Norman Zhang wrote: Thanks. I edited users with the following entries DEFAULT Auth-Type = System Fall-Through = 1, cisco-avpair = shell:priv-lvl=1, Service-Type = Administrative-User DEFAULT Group == user-ro cisco-avpair := shell:priv-lvl=7 DEFAULT Group

Re: User /etc/shadow for Authentication

2007-04-25 Thread Norman Zhang
Dennis Skinner wrote: Make sure you are *only* using PAP. CHAP encrypts the password over the wire and you cannot compare crypt to crypt. One of them needs to be cleartext (this is a limitation of encryption, not FreeRADIUS). See the table here:

Re: User /etc/shadow for Authentication

2007-04-25 Thread tnt
Login OK: [tester] (from client test-network port 1 cli 10.0.0.1) Sending Access-Accept of id 27 to 10.0.0.2:1645 You have got in. But you haven't returned any radius attributes. You need to return something like Service-Type = Administrative-User or NAS-Prompt-User so NAS knows what to do with

Re: User /etc/shadow for Authentication

2007-04-25 Thread Norman Zhang
[EMAIL PROTECTED] wrote: Login OK: [tester] (from client test-network port 1 cli 10.0.0.1) Sending Access-Accept of id 27 to 10.0.0.2:1645 You have got in. But you haven't returned any radius attributes. You need to return something like Service-Type = Administrative-User or NAS-Prompt-User

RE: User /etc/shadow for Authentication [unclas]

2007-04-25 Thread Ranner, Frank MR
] ists.freeradius.org] On Behalf Of Norman Zhang Sent: Thursday, 26 April 2007 10:50 To: freeradius-users@lists.freeradius.org Subject: Re: User /etc/shadow for Authentication [EMAIL PROTECTED] wrote: Login OK: [tester] (from client test-network port 1 cli 10.0.0.1) Sending Access-Accept of id 27

User /etc/shadow for Authentication

2007-04-24 Thread Norman Zhang
How do I setup users tester-a to use /etc/shadow for authentication? Currently I have tester-a Auth-Type := Local, User-Password == superuser cisco-avpair = shell:priv-lvl=15, Service-Type = Administrative-User Norman - List info/subscribe/unsubscribe? See

Re: User /etc/shadow for Authentication

2007-04-24 Thread Dennis Skinner
Norman Zhang wrote: How do I setup users tester-a to use /etc/shadow for authentication? Currently I have tester-a Auth-Type := Local, User-Password == superuser cisco-avpair = shell:priv-lvl=15, Service-Type = Administrative-User I would start by reading radiusd.conf. Look

Re: User /etc/shadow for Authentication

2007-04-24 Thread Norman Zhang
Dennis Skinner wrote: Norman Zhang wrote: How do I setup users tester-a to use /etc/shadow for authentication? Currently I have tester-a Auth-Type := Local, User-Password == superuser cisco-avpair = shell:priv-lvl=15, Service-Type = Administrative-User I would start by