create SSH accounts using RADIUS pam

Zeus Panchenko zeus at ibs.dn.ua
Tue Sep 6 07:30:50 CEST 2016


you can look at 
http://puszcza.gnu.org.ua/projects/pam-modules

Eero Volotinen <eero.volotinen at iki.fi> wrote:
> You could use some pam modules that can create homedirectory?
> 
> 5.9.2016 5.30 ip. "Janis Heller" <janis.heller at outlook.de> kirjoitti:
> 
> > I use the REST module of RADIUS to validate login requests (username &
> > password).
> > Now I would like my users to be able to login to some servers using SSH.
> > Their accounts should be all very unprivileged (just for SSH tunneling).
> > After setting up the pam sshd module I recognized the login would be only
> > possible by creating a new user with an empty password by using:
> >
> > adduser testuser
> >
> > on the server. Is there a way to prevent this and allow users to login in
> > case of RADIUS accepted their username & password.
> > I already searched for this problem:
> >
> > http://serverfault.com/questions/567628/authenticate-
> > radius-user-using-pam-and-ssh
> >
> > Setting up ldap would be a bit too much for this I think, isn’t there an
> > easier way?
> >
> > All the best;
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > list/users.html
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
> 

-- 
Zeus V. Panchenko				jid:zeus at im.ibs.dn.ua
IT Dpt., I.B.S. LLC					  GMT+2 (EET)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 180 bytes
Desc: not available
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20160906/dcd10b84/attachment.sig>


More information about the Freeradius-Users mailing list