<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style>.EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; }</style>
</head>
<body>
<font face="Courier, monospace" size="2">
<div>Hi,</div>
<div> </div>
<div>Today I check the "etc/passwd" for the usernames and passwords and fetches the users default group from "etc/passwd".</div>
<div>In the "users" file I have the rights for each group.</div>
<div> </div>
<div>My current config:</div>
<div>OS: Solaris 10</div>
<div>FreeRadius: 1.1.7</div>
<div>Mysql: 5.0.51 - For logging and NAS clients</div>
<div>OS packages installed: db-4.2.52.NC-sol9-sparc-local</div>
<div>OS packages installed: freeradius-1.1.7-sol10-sparc-local</div>
<div>OS packages installed: gcc-3.4.6-sol10-sparc-local</div>
<div>OS packages installed: gdbm-1.8.3-sol9-sparc-local</div>
<div>OS packages installed: libiconv-1.11-sol10-sparc-local</div>
<div>OS packages installed: libtool-1.5.24-sol10-sparc-local</div>
<div>OS packages installed: make-3.81-sol10-sparc-local</div>
<div>OS packages installed: mysql-5.0.51-sol10-sparc-local</div>
<div>OS packages installed: ncurses-5.6-sol10-sparc-local</div>
<div>OS packages installed: netsnmp-5.4.1-sol10-sparc-local</div>
<div>OS packages installed: openldap-2.3.35-sol10-sparc-local</div>
<div>OS packages installed: openssl-0.9.8f-sol10-sparc-local</div>
<div>OS packages installed: perl-5.8.8-sol10-sparc-local</div>
<div>OS packages installed: sasl-2.1.21-sol10-sparc-local</div>
<div>OS packages installed: zlib-1.2.3-sol10-sparc-local</div>
<div>OS packages installed: Freeradius: 1.1.7</div>
<div> </div>
<div>#etc/passwd</div>
<div>testuser:x:103:500:Test User:/home/testuser:/bin/bash</div>
<div> </div>
<div>#etc/group</div>
<div>admin-network::500:</div>
<div>user-network::600:</div>
<div> </div>
<div>#/usr/local/etc/raddb/users</div>
<div>DEFAULT Group == "admin-network", Auth-Type = System</div>
<div> Service-Type = Administrative-User,</div>
<div> Fall-Through = No</div>
<div> </div>
<div>#/usr/local/etc/raddb/huntgroups</div>
<div>defaultgroup NAS-IP-Address == 192.168.1.20</div>
<div> Group = admin-network,</div>
<div> Group = user-network</div>
<div> </div>
<div> </div>
<div>Today the user "testuser" would get Administrative rights on the nas with IP=192.168.1.20 since he is a member of the group "admin-network".</div>
<div> </div>
<div>I have been browsing the mailing list, wiki and google trying to find out if anyone has done the following:</div>
<div>1. I want to check the username/password against LDAP/AD instead of directly towards "etc/passwd".</div>
<div>2. After that I would like to continue by fetching the user's default group from the Solaris 10 system (/"etc/passwd") to give it rights depending on which group the user belongs to.</div>
<div>3. I know that this means I still have to have the username in the "/etc/passwd" but this will keep the users from having different logins in our infrastructure.</div>
<div> </div>
<div>Best regards</div>
<div> </div>
<div>Mats Blomgren B - IP Engineer</div>
<div> </div>
</font>
</body>
</html>