Accounting with pam_radius_auth

[Alan DeKok]

Christophe Boyanique wrote:
> In fact the main problem is if I su to an unprivileged user, no accounting
> packet is sent and output displays:
> 
> su: pam_radius_auth: Could not open configuration file /etc/raddb/server:
> Permission denid

  Yes.  That file has to be readable by the user.  This is a limitation
of PAM, I think, where the pam_radius_auth module is run as the user.

> I suppose that session part of pam runs as unprivilegied user and it can't
> open the /etc/raddb/server which is protected as advised in the
> documentation.

  Yes.

> Is this a common problem (I found nothing in the archive) or do I have a
> mistake in the pam configuration ?

  It's a problem.  A solution (a bad one) is to "chmod a+r" the files.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog