rlm_unix and logging of bad passwords

[Phil Mayers]

On 07/03/14 16:23, Mischa Diehm wrote:
> Hi,
>
> I run: freeradius-2.2.0p2  on OpenBSD 5.4
>
> and I'm wondering how I can stop freeradius to log bad passwords to
> /var/log/radius/radius.log. The users are in the system password-db.
>
> I checked in rlm_unix.c where the log is happening but from there didn't
> figure what could be done to prevent the line from being logged:

Don't use rlm_unix for authentication. Let rlm_pap do it:

authorize {
   ...
   unix
   pap
   ...
}
authenticate {
   Auth-Type PAP {
     pap
   }
}

Seems to be the day for rlm_unix/pap...