27 Oct
2021
27 Oct
'21
9:11 a.m.
On Oct 27, 2021, at 4:56 AM, Phil Leinster <philleinster@gmail.com> wrote:
The package was configured with options that were incompatible with the configuration in the unit. Namely, I had to change the user and group from 'freerad' to 'root',
It's best to not run it as root. While we try to make everything secure, we're not perfect.
as this was changed as part of the google-authenticator integration in the conf file. A bit embarrassing I didn't find it sooner, to be honest. I believe root is a requirement for the G-A module.
3.0.25 contains a TOTP module, which can run the algorithm used by Google Authenticator. And it doesn't need root. I'm not sure why the google authenticator stuff needs root. It really shouldn't. Alan DeKok.