<html>
<head>
<style>
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
FONT-SIZE: 10pt;
FONT-FAMILY:Tahoma
}
</style>
</head>
<body class='hmmessage'>
the pam_radius_auth documentation says to email YOU and refers to the radius mailing list,<br>which is where I am. you are the author of that as well.<br><br>There's no useful documentation on pam on the system, man pages are useless.<br><br>I'll try to find a PAM mailing list.<br><br>yes, I guess after decades you get tired of answering questions of newbies.<br>I'd have thought this would all be well documented by now. oh well.<br><br>> Date: Mon, 26 Nov 2007 22:48:11 +0100<br>> From: aland@deployingradius.com<br>> To: freeradius-users@lists.freeradius.org<br>> Subject: Re: local ssh authentication via radius possible?<br>> <br>> Dan Gahlinger wrote:<br>> > I'm not fighting you at all.<br>> <br>> <shrug> Having answered questions on this list for nearly a decade, I<br>> see patterns.<br>> <br>> > All of your answers previously were "read the documentation, it's there".<br>> > well, it's not. definitely not.<br>> <br>> The parts I was pointing you to were documented. Or, I was pointing<br>> you to other non-RADIUS documentation. i.e. PAM.<br>> <br>> > the pam_radius_auth link you gave me states:<br>> ...<br>> > take a look at my config - /etc/pam.d/sshd<br>> <br>> Which is different. Unfortunately, every distribution has their own<br>> "special" flavor of their PAM configuration. The documentation in<br>> pam_radius_auth is generic, and matches many commonly used<br>> configurations. If it doesn't, see:<br>> <br>> a) the documentation for your OS<br>> b) the generic PAM documentation<br>> <br>> i.e. configuring PAM to use pam_radius_auth is a... PAM issue. The<br>> best place to look for help is the PAM documentation, or a PAM list, or<br>> OS-specific help.<br>> <br>> > a "Default" radiusd install with NO changes (except server file as follows:<br>> > 127.0.0.1 testing123 3<br>> > <br>> > users in password file can login, but it doesn't seem to be using radius.<br>> <br>> Then see the PAM documentation for debugging, and how to see if it's<br>> calling pam_radius_auth.<br>> <br>> > the documentation for pam is as clear as mud. did it mean to modify the<br>> > login file like this:<br>> ...<br>> Modifying the "login" file affects only the "login" process. Not "sshd".<br>> <br>> > because that doesnt make any difference either. same result as with just<br>> > sshd above<br>> <br>> See the PAM documentation for debugging PAM. Once you have it calling<br>> pam_radius_auth, ask more questions here.<br>> <br>> Alan DeKok.<br>> -<br>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html<br><br /><hr />Express yourself with free Messenger emoticons. <a href='http://www.freemessengeremoticons.ca/?icid=EMENCA122' target='_new'>Get them today!</a></body>
</html>