<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2900.2096" name=GENERATOR></HEAD>
<BODY>
<DIV>
<DIV><FONT face=Arial size=2><SPAN class=765325518-01092006><SPAN
class=625462319-01092006>Hi,</SPAN></SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=765325518-01092006><SPAN
class=625462319-01092006></SPAN></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=765325518-01092006><SPAN
class=625462319-01092006>I am looking for a Linux client side HOW-TO for
radius authentication without requiring presence of the login id on client
side locally.</SPAN></SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=765325518-01092006><SPAN
class=625462319-01092006></SPAN></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=765325518-01092006><SPAN
class=625462319-01092006>The following is the authentication scenario I am
trying:</SPAN></SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=765325518-01092006><SPAN
class=625462319-01092006></SPAN></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=765325518-01092006>1) I have freeRadius
server installed on a RedHat Linux machine</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=765325518-01092006>2) I would like
users logging into other RedHat Linux machines in our network to have their
login/passwd authenticated using freeRadius server (for login, su, ssh, telnet,
ftp etc. ways of accessing local client machines in the
network)</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=765325518-01092006>3) I do not want to
use LDAP on server or client side</SPAN></FONT></DIV>
<DIV><SPAN class=765325518-01092006><FONT face=Arial><FONT size=2>4) I am using
PAM and have experimented with pam_radius_auth module<SPAN
class=625462319-01092006> without success</SPAN></FONT></FONT></SPAN></DIV>
<DIV><FONT face=Arial size=2><SPAN class=765325518-01092006>5) The problem I am
facing is that the login id has also to be defined locally on client Linux
machines --- otherwise, for example, the su command fails indicating that the id
does not exist (if I create the login id on client locally, then it queries
freeRadius server)</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=765325518-01092006>6) I do not want to
add "ldap" to nsswitch.conf file of client --- just want to stick to radius for
now</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=765325518-01092006></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=765325518-01092006>In summary, is there
a Linux client side HOW-TO <SPAN class=625462319-01092006>for
</SPAN>radius authentication without requiring presence of the login id on
client side locally?</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=765325518-01092006></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=765325518-01092006><SPAN
class=625462319-01092006>Regards ... J. C. Desai</SPAN></SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=765325518-01092006></SPAN></FONT> </DIV></DIV></BODY></HTML>