Re: PAM Radius Authentication
Ok, I have gotten pam_radius_auth.so to work and it is working well, however, is there any way to get it to create a UID when it receives an auth accept? At the moment I have to run adduser every time I want a user to be able to log in, this would be ok if the users were fairly static, I could run a script every night to add new users to the system, unfortunately I have a lot of users and they need to be available immediately. Thanks for all your help so far. -Daniel Davis
daniel wrote:
Ok, I have gotten pam_radius_auth.so to work and it is working well, however, is there any way to get it to create a UID when it receives an auth accept?
Not at the moment. It's not clear how to do that in PAM.
At the moment I have to run adduser every time I want a user to be able to log in, this would be ok if the users were fairly static, I could run a script every night to add new users to the system, unfortunately I have a lot of users and they need to be available immediately.
It sounds like a database might be a better choice. pam_ldap, in conjunction with nss_ldap should solve the problem. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Ok, I have some more questions.
It sounds like a database might be a better choice. pam_ldap, in conjunction with nss_ldap should solve the problem.
If I use LDAP to authenticate with PAM and freeradius authenticates against LDAP as well am I able to still store session details with LDAP? I am trying to integrate my current hotspot database with my terminals so that users can authenticate on either using the same username and password. It is a ticket based system and they have a limited amount of time, this works fine on both systems with freeradius (mysql backend) but it is a pain to continually have to add users to /etc/passwd. This can all be administered througha set of PHP scripts. Thanks, Daniel Davis
daniel wrote:
If I use LDAP to authenticate with PAM and freeradius authenticates against LDAP as well am I able to still store session details with LDAP?
I believe so, yes.
I am trying to integrate my current hotspot database with my terminals so that users can authenticate on either using the same username and password. It is a ticket based system and they have a limited amount of time, this works fine on both systems with freeradius (mysql backend) but it is a pain to continually have to add users to /etc/passwd. This can all be administered througha set of PHP scripts.
That's why databases were invented. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Hi can u tell me how run radius with pam? thanks On 4/19/07, daniel <daniel@centreit.com.au> wrote:
Ok, I have gotten pam_radius_auth.so to work and it is working well, however, is there any way to get it to create a UID when it receives an auth accept? At the moment I have to run adduser every time I want a user to be able to log in, this would be ok if the users were fairly static, I could run a script every night to add new users to the system, unfortunately I have a lot of users and they need to be available immediately.
Thanks for all your help so far.
-Daniel Davis
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Best Regards Reza Behroozi http://reza.behroozi.info http://www.persianadmins.ir http://www.persianadmins.com
participants (3)
-
Alan DeKok -
daniel -
Reza Behroozi