You may read the doc wrong. The group you should look for is "radiusd". When you create user "radiusd", the group "radiusd" should also be created if you use adduser command to do the job. You don't what user "radiusd" belong to group "root". Do "chgrp radiusd /etc/shadow". Min
-----Original Message----- From: freeradius-users-bounces+mqiu=globalinternetworking.com@lists. freeradius.org [mailto:freeradius-users-bounces+mqiu=globalinternetworking.co m@lists.freeradius.org] On Behalf Of Nataniel Klug Sent: Thursday, January 26, 2006 3:57 PM To: FreeRadius users mailing list Subject: Re: Problems System Auth with FreeRadius (/etc/shadow)
Alan,
Now you have gived me a tip... At my Fedora there is no group shadow, so I put radius to run as group "root" so it could read /etc/shadow only if I set +r to group at shadow files.
Att,
Nataniel Klug
----- Original Message ----- From: "Alan DeKok" <aland@ox.org> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Thursday, January 26, 2006 3:37 PM Subject: Re: Problems System Auth with FreeRadius (/etc/shadow)
"Nataniel Klug" <nata@cnett.psi.br> wrote:
I just have installed the package from Fedora Core 3, nothing else.
Then look at the configuration file. See how it's different from what is shipped with FreeRADIUS.
And setting "a+rw" on /etc/passwd and /etc/shadow is probaby the single worst thing you can do to your system. EVER. Rather than doing that, read raddb/radiusd.conf, it talks about issues with reading /etc/shadow, and describes suggested fixes won't destroy your system.
Honestly, I don't understand why it's so hard to read the configuration files.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html