Setting up Radius

[Alan DeKok]

Mike <mike at mfenton.com> wrote:
> I am setting up FreeRadius to be used to authenticate dial-up and DSL
> users (@place.com). I would like to use the unix passwd file because we
> already have a radius server in place that is using the unix passwd
> file. However, from what I understand CHAP will not work against the
> unix passwd? 

  That's what the FAQ says.

> Is this true, and does windows use this for dial-up and
> PPPOE connections? I do not know what windows uses.

  Windows uses whatever the user told it to use, which might be CHAP.

  Since CHAP won't work, the users will probably try PAP.

> Also, I will simply make a script that will copy the passwd, shadow
> file, and the group file somewhere and tell radius to use these files
> oppose to the default files. This way I can revoke and grant people
> access to the radius server.

  Why?  Create a Unix group called "disabled", and put users into that
group.  See the FAQ.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog