AIX client to MS RADIUS server
Hello all, Got a clean build of pam_radius_auth (v.1.3.17) on aix 6.1, but cannot get PAM configured correctly to use this version. I am now trying with source 2.2.4, but can anyone confirm this works with AIX as a client to a Microsoft RADIUS server? Our goal is multi-factor authentication using token password generators. This is working for Linux and Solaris, both environments using 1.3.17 and PAM configurations. Can someone confirm if AIX should work with this module, and for either version? Thanks, Lloyd
Lloyd Gill wrote:
Got a clean build of pam_radius_auth (v.1.3.17) on aix 6.1,
People still use AIX? Hmm... I haven't used it in 15 years. The module *might* work there, but there's no guarantee.
but cannot get PAM configured correctly to use this version. I am now trying with source 2.2.4, but can anyone confirm this works with AIX as a client to a Microsoft RADIUS server?
The PAM module does RADIUS with any RADIUS server. Whether it works on AIX is something I don't know.
Our goal is multi-factor authentication using token password generators. This is working for Linux and Solaris, both environments using 1.3.17 and PAM configurations. Can someone confirm if AIX should work with this module, and for either version?
It should work... what problem are you seeing? Alan DeKok.
Thanks Alan. We have heavy usage of AIX in our environment (along with other varieties of Unix and Linux). I wasn’t seen any errors for the 1.3.17 build, but it just was not communicating to our Radius server. I am now attempting the 2.2.4 build. Will post results soon. Lloyd From: Alan DeKok <aland@deployingradius.com<mailto:aland@deployingradius.com>> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Date: Tuesday, March 25, 2014 at 4:35 PM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Subject: Re: AIX client to MS RADIUS server Lloyd Gill wrote: Got a clean build of pam_radius_auth (v.1.3.17) on aix 6.1, People still use AIX? Hmm... I haven't used it in 15 years. The module *might* work there, but there's no guarantee. but cannot get PAM configured correctly to use this version. I am now trying with source 2.2.4, but can anyone confirm this works with AIX as a client to a Microsoft RADIUS server? The PAM module does RADIUS with any RADIUS server. Whether it works on AIX is something I don't know. Our goal is multi-factor authentication using token password generators. This is working for Linux and Solaris, both environments using 1.3.17 and PAM configurations. Can someone confirm if AIX should work with this module, and for either version? It should work... what problem are you seeing? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On 25 Mar 2014, at 20:50, Lloyd Gill <lhg@jhmi.edu> wrote:
Thanks Alan. We have heavy usage of AIX in our environment (along with other varieties of Unix and Linux). I wasn’t seen any errors for the 1.3.17 build, but it just was not communicating to our Radius server. I am now attempting the 2.2.4 build. Will post results soon.
Um there is no 2.2.4 build? The latest official version is 1.4.0 (unreleased). Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
Ok so the 2.2.4 that is on the free radius download site is for the Server, not the client? Ok, I just realized that. If that statement is true, then does the 1.4 version you reference below have any new support for AIX? Thanks, Lloyd From: Arran Cudbard-Bell <a.cudbardb@freeradius.org<mailto:a.cudbardb@freeradius.org>> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Date: Tuesday, March 25, 2014 at 5:08 PM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Subject: Re: AIX client to MS RADIUS server On 25 Mar 2014, at 20:50, Lloyd Gill <lhg@jhmi.edu<mailto:lhg@jhmi.edu>> wrote: Thanks Alan. We have heavy usage of AIX in our environment (along with other varieties of Unix and Linux). I wasn’t seen any errors for the 1.3.17 build, but it just was not communicating to our Radius server. I am now attempting the 2.2.4 build. Will post results soon. Um there is no 2.2.4 build? The latest official version is 1.4.0 (unreleased). Arran Cudbard-Bell <a.cudbardb@freeradius.org<mailto:a.cudbardb@freeradius.org>> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
On 25 Mar 2014, at 21:27, Lloyd Gill <lhg@jhmi.edu> wrote:
Ok so the 2.2.4 that is on the free radius download site is for the Server, not the client? Ok, I just realized that.
If that statement is true, then does the 1.4 version you reference below have any new support for AIX?
No, but if you want to fix support for AIX then that would be the one to start working with. If you were experiencing endian issues with the md5 code (which other people have with 1.3.7) it should fix them, as it uses an autoconf byte order check instead of relying on compiler macros (which are incomplete). This is relevant to AIX in particular as the majority of AIX platforms appear to be PPC which has configurable endianess. -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
So, to confirm, I should be working with v1.4 of the pam radius auth client, correct? If so, how can I obtain that version? Lloyd From: Arran Cudbard-Bell <a.cudbardb@freeradius.org<mailto:a.cudbardb@freeradius.org>> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Date: Tuesday, March 25, 2014 at 6:00 PM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Subject: Re: AIX client to MS RADIUS server On 25 Mar 2014, at 21:27, Lloyd Gill <lhg@jhmi.edu<mailto:lhg@jhmi.edu>> wrote: Ok so the 2.2.4 that is on the free radius download site is for the Server, not the client? Ok, I just realized that. If that statement is true, then does the 1.4 version you reference below have any new support for AIX? No, but if you want to fix support for AIX then that would be the one to start working with. If you were experiencing endian issues with the md5 code (which other people have with 1.3.7) it should fix them, as it uses an autoconf byte order check instead of relying on compiler macros (which are incomplete). This is relevant to AIX in particular as the majority of AIX platforms appear to be PPC which has configurable endianess. -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org<mailto:a.cudbardb@freeradius.org>> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
On 25 Mar 2014, at 22:08, Lloyd Gill <lhg@jhmi.edu> wrote:
So, to confirm, I should be working with v1.4 of the pam radius auth client, correct?
Yes.
If so, how can I obtain that version?
git clone https://github.com/FreeRADIUS/pam_radius.git -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
On 26 Mar 2014, at 07:51, Arran Cudbard-Bell <a.cudbardb@freeradius.org> wrote:
On 25 Mar 2014, at 22:08, Lloyd Gill <lhg@jhmi.edu> wrote:
So, to confirm, I should be working with v1.4 of the pam radius auth client, correct?
Yes.
If so, how can I obtain that version?
Interwebs say AIX is big endian, which unless specifically checked for, would result in the MD5 code producing incorrect hashes. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
Ok, good to know. So, even with 1.4, is it unlikely that it will build on AIX? From: Arran Cudbard-Bell <a.cudbardb@freeradius.org<mailto:a.cudbardb@freeradius.org>> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Date: Wednesday, March 26, 2014 at 6:52 AM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Subject: Re: AIX client to MS RADIUS server On 26 Mar 2014, at 07:51, Arran Cudbard-Bell <a.cudbardb@freeradius.org<mailto:a.cudbardb@freeradius.org>> wrote: On 25 Mar 2014, at 22:08, Lloyd Gill <lhg@jhmi.edu<mailto:lhg@jhmi.edu>> wrote: So, to confirm, I should be working with v1.4 of the pam radius auth client, correct? Yes. If so, how can I obtain that version? git clone https://github.com/FreeRADIUS/pam_radius.git Interwebs say AIX is big endian, which unless specifically checked for, would result in the MD5 code producing incorrect hashes. Arran Cudbard-Bell <a.cudbardb@freeradius.org<mailto:a.cudbardb@freeradius.org>> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
On 26 Mar 2014, at 10:59, Lloyd Gill <lhg@jhmi.edu> wrote:
Ok, good to know. So, even with 1.4, is it unlikely that it will build on AIX?
If 1.3.7 build cleanly on AIX, 1.4 will most likely build cleanly on AIX too. Just try it, it'll probably work, I just can't guarantee it, because you've not stated what the actual symptoms are. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
Ok, thanks. I’ll keep you posted with how it goes. I have linux and solaris pam.conf configured correctly to use the 1.3.17 module. Would anyone have any suggestions for AIX as to what the pam.conf file would look like for ssh auth to use this module? Lloyd From: Arran Cudbard-Bell <a.cudbardb@freeradius.org<mailto:a.cudbardb@freeradius.org>> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Date: Wednesday, March 26, 2014 at 8:11 AM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Subject: Re: AIX client to MS RADIUS server On 26 Mar 2014, at 10:59, Lloyd Gill <lhg@jhmi.edu<mailto:lhg@jhmi.edu>> wrote: Ok, good to know. So, even with 1.4, is it unlikely that it will build on AIX? If 1.3.7 build cleanly on AIX, 1.4 will most likely build cleanly on AIX too. Just try it, it'll probably work, I just can't guarantee it, because you've not stated what the actual symptoms are. Arran Cudbard-Bell <a.cudbardb@freeradius.org<mailto:a.cudbardb@freeradius.org>> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
Latest compile errors for source 1.4: # CC=gcc /opt/freeware/bin/make gcc -Wall -fPIC -c src/pam_radius_auth.c -o pam_radius_auth.o src/pam_radius_auth.c: In function 'rad_converse': src/pam_radius_auth.c:1004: warning: passing argument 3 of 'pam_get_item' from incompatible pointer type src/pam_radius_auth.c:1007: warning: passing argument 2 of 'conv->conv' from incompatible pointer type src/pam_radius_auth.c: At top level: src/pam_radius_auth.c:1037: error: expected '=', ',', ';', 'asm' or '__attribute__' before 'int' src/pam_radius_auth.c:1240: error: expected '=', ',', ';', 'asm' or '__attribute__' before 'int' src/pam_radius_auth.c: In function 'pam_private_session': src/pam_radius_auth.c:1268: warning: passing argument 2 of 'pam_get_user' from incompatible pointer type src/pam_radius_auth.c:1288: warning: passing argument 3 of 'pam_get_item' from incompatible pointer type src/pam_radius_auth.c: At top level: src/pam_radius_auth.c:1335: error: expected '=', ',', ';', 'asm' or '__attribute__' before 'int' src/pam_radius_auth.c:1340: error: expected '=', ',', ';', 'asm' or '__attribute__' before 'int' src/pam_radius_auth.c:1349: error: expected '=', ',', ';', 'asm' or '__attribute__' before 'int' src/pam_radius_auth.c:1575: error: expected '=', ',', ';', 'asm' or '__attribute__' before 'int' make: *** [pam_radius_auth.o] Error 1 From: Arran Cudbard-Bell <a.cudbardb@freeradius.org<mailto:a.cudbardb@freeradius.org>> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Date: Wednesday, March 26, 2014 at 8:11 AM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Subject: Re: AIX client to MS RADIUS server On 26 Mar 2014, at 10:59, Lloyd Gill <lhg@jhmi.edu<mailto:lhg@jhmi.edu>> wrote: Ok, good to know. So, even with 1.4, is it unlikely that it will build on AIX? If 1.3.7 build cleanly on AIX, 1.4 will most likely build cleanly on AIX too. Just try it, it'll probably work, I just can't guarantee it, because you've not stated what the actual symptoms are. Arran Cudbard-Bell <a.cudbardb@freeradius.org<mailto:a.cudbardb@freeradius.org>> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
I take this to mean no one has successfully got pam radius auth module to work on AIX? I do appreciate the input of this list, but AIX is an enterprise-class operating system that runs a lot of mission critical applications. I would be surprised we are the only unix/linux shop that is deploying multi-factor authentication using radius on AIX. From: Alan DeKok <aland@deployingradius.com<mailto:aland@deployingradius.com>> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Date: Wednesday, March 26, 2014 at 11:04 AM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Subject: Re: AIX client to MS RADIUS server Lloyd Gill wrote: Latest compile errors for source 1.4: Well... please supply a patch. I don't have access to an AIX system, and I will likely never have access to one. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Lloyd Gill wrote:
I take this to mean no one has successfully got pam radius auth module to work on AIX? I do appreciate the input of this list, but AIX is an enterprise-class operating system that runs a lot of mission critical applications. I would be surprised we are the only unix/linux shop that is deploying multi-factor authentication using radius on AIX.
Apparently so. So far as I can tell, everyone stopped using AIX 10 years ago. Any "enterprise-class" claims may be true, but the modern Linux and FreeBSD systems outperform any AIX system I've ever seen. Alan DeKok.
On Wed, Mar 26, 2014 at 10:25 PM, Lloyd Gill <lhg@jhmi.edu> wrote:
I would be surprised we are the only unix/linux shop that is deploying multi-factor authentication using radius on AIX.
I wouldn't be surprised at all. We had some AIX boxes many years ago, and finally decided it was not worthed. Not for running the software we needed. So when the time came to replace the hardware, x86 + linux (and in some cases, vmware/xen) took their place. While AIX/ppc is somewhat more linux-like (compared to, say, tru64), some OSS programs would perform more poorly compared to their x86/linux counterpart (with similar spec/price range) due to lack of optimizations (e.g. BIND when running multiple thread, at least at that time), and others simply won't compile (like you just found out with pam_radius_auth). WRT multi-factor auth, there are vendors who sell hardware-token based solution, which should be more suitable for enterprises who still use AIX. So unless you can fix the code and send a patch (or hire someone to do so), these kind of vendors are probably your best bet. -- Fajar
Hi,
I would be surprised we are the only unix/linux shop that is deploying multi-factor authentication using radius on AIX.
well....certainly you're not common. I havent actually talked to an AIX user in person for a good many years... I havent used AIX myself for even longer... Tru64 was 10 years back now and I'm almost off Solaris too. Linux or BSD for mission critical systems now. alan
On 26 Mar 2014, at 15:25, Lloyd Gill <lhg@jhmi.edu> wrote:
I take this to mean no one has successfully got pam radius auth module to work on AIX?
You can't really draw that from the lack of responses. pam radius users may not be using the server, and this list is primarily for users of the FreeRADIUS server.
I do appreciate the input of this list, but AIX is an enterprise-class operating system that runs a lot of mission critical applications. I would be surprised we are the only unix/linux shop that is deploying multi-factor authentication using radius on AIX.
I wouldn't be that surprised. If you provide output of man pam_get_user, man pam_get_item, we can probably get it working... Or if you're just looking for an excuse to pay lots of money to a commercial vendor, then best of luck with that. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
Ok, I am now working on AIX 7.1 and have a build of free radius module v1.4. Configured the OS for pam auth, and here are my results: 2-factor auth completes, but then the shell exits. I actually see the MOTD, but am right away logged out. Lloyd From: Arran Cudbard-Bell <a.cudbardb@freeradius.org<mailto:a.cudbardb@freeradius.org>> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Date: Wednesday, March 26, 2014 at 8:11 AM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Subject: Re: AIX client to MS RADIUS server On 26 Mar 2014, at 10:59, Lloyd Gill <lhg@jhmi.edu<mailto:lhg@jhmi.edu>> wrote: Ok, good to know. So, even with 1.4, is it unlikely that it will build on AIX? If 1.3.7 build cleanly on AIX, 1.4 will most likely build cleanly on AIX too. Just try it, it'll probably work, I just can't guarantee it, because you've not stated what the actual symptoms are. Arran Cudbard-Bell <a.cudbardb@freeradius.org<mailto:a.cudbardb@freeradius.org>> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
On 27 Mar 2014, at 18:20, Lloyd Gill <lhg@jhmi.edu> wrote:
Ok, I am now working on AIX 7.1 and have a build of free radius module v1.4. Configured the OS for pam auth, and here are my results:
2-factor auth completes, but then the shell exits. I actually see the MOTD, but am right away logged out.
Well at least it builds and and authenticates... Check the security logs to see why you get logged out, this might not even be an issue with pam_auth_radius. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
Here is my output of the build. Not clean, but it starts to authenticate, but logs me out. Anyone have an idea on why the build produced this? gcc -Wall -fPIC -c src/pam_radius_auth.c -o pam_radius_auth.o src/pam_radius_auth.c: In function 'rad_converse': src/pam_radius_auth.c:1004: warning: passing argument 3 of 'pam_get_item' from incompatible pointer type src/pam_radius_auth.c:1007: warning: passing argument 2 of 'conv->conv' from incompatible pointer type src/pam_radius_auth.c: In function 'pam_sm_authenticate': src/pam_radius_auth.c:1056: warning: passing argument 2 of 'pam_get_user' from incompatible pointer type src/pam_radius_auth.c:1071: warning: passing argument 3 of 'pam_get_item' from incompatible pointer type src/pam_radius_auth.c:1095: warning: passing argument 3 of 'pam_get_item' from incompatible pointer type src/pam_radius_auth.c:1109: warning: passing argument 3 of 'pam_get_item' from incompatible pointer type src/pam_radius_auth.c:1142: warning: passing argument 3 of 'pam_get_item' from incompatible pointer type src/pam_radius_auth.c: In function 'pam_sm_setcred': src/pam_radius_auth.c:1246: warning: passing argument 3 of 'pam_get_data' from incompatible pointer type src/pam_radius_auth.c: In function 'pam_private_session': src/pam_radius_auth.c:1268: warning: passing argument 2 of 'pam_get_user' from incompatible pointer type src/pam_radius_auth.c:1288: warning: passing argument 3 of 'pam_get_item' from incompatible pointer type src/pam_radius_auth.c: In function 'pam_sm_chauthtok': src/pam_radius_auth.c:1368: warning: passing argument 2 of 'pam_get_user' from incompatible pointer type src/pam_radius_auth.c:1388: warning: passing argument 3 of 'pam_get_item' from incompatible pointer type src/pam_radius_auth.c:1397: warning: passing argument 3 of 'pam_get_item' from incompatible pointer type src/pam_radius_auth.c:1402: warning: passing argument 3 of 'pam_get_item' from incompatible pointer type gcc -Wall -fPIC -c src/md5.c -o md5.o gcc -shared pam_radius_auth.o md5.o -lpam -lc -o pam_radius_auth.so From: Arran Cudbard-Bell <a.cudbardb@freeradius.org<mailto:a.cudbardb@freeradius.org>> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Date: Thursday, March 27, 2014 at 2:30 PM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Subject: Re: AIX client to MS RADIUS server On 27 Mar 2014, at 18:20, Lloyd Gill <lhg@jhmi.edu<mailto:lhg@jhmi.edu>> wrote: Ok, I am now working on AIX 7.1 and have a build of free radius module v1.4. Configured the OS for pam auth, and here are my results: 2-factor auth completes, but then the shell exits. I actually see the MOTD, but am right away logged out. Well at least it builds and and authenticates... Check the security logs to see why you get logged out, this might not even be an issue with pam_auth_radius. Arran Cudbard-Bell <a.cudbardb@freeradius.org<mailto:a.cudbardb@freeradius.org>> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
On 28 Mar 2014, at 18:13, Alan DeKok <aland@deployingradius.com> wrote:
Lloyd Gill wrote:
Here is my output of the build. Not clean, but it starts to authenticate, but logs me out. Anyone have an idea on why the build produced this?
They are warnings, not errors. Ignore them.
There does appear to be a "debug" config variable. https://github.com/FreeRADIUS/pam_radius/blob/master/src/pam_radius_auth.c#L... Set it to any value and you should see some extra debugging messages in the pam logs. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
I have debug mode set. I get an odd message in my auth logs show my account expired, but it is not. For some reason, when I test with 2-factor, my account gets hosed up and the authentication team has to keep deleting my token then re-initializing for me to test. Here is that snippet in the logs: auth|security:err|error sshd[4194410]: error: PAM: User account has expired I’m also seeing these: auth|security:err|error sshd[5308746]: pam_radius_auth: Failed looking up IP address for RADIUS server Lloyd From: Arran Cudbard-Bell <a.cudbardb@freeradius.org<mailto:a.cudbardb@freeradius.org>> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Date: Friday, March 28, 2014 at 2:25 PM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Subject: Re: AIX client to MS RADIUS server On 28 Mar 2014, at 18:13, Alan DeKok <aland@deployingradius.com<mailto:aland@deployingradius.com>> wrote: Lloyd Gill wrote: Here is my output of the build. Not clean, but it starts to authenticate, but logs me out. Anyone have an idea on why the build produced this? They are warnings, not errors. Ignore them. There does appear to be a "debug" config variable. https://github.com/FreeRADIUS/pam_radius/blob/master/src/pam_radius_auth.c#L... Set it to any value and you should see some extra debugging messages in the pam logs. Arran Cudbard-Bell <a.cudbardb@freeradius.org<mailto:a.cudbardb@freeradius.org>> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
Thanks. From: Alan DeKok <aland@deployingradius.com<mailto:aland@deployingradius.com>> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Date: Friday, March 28, 2014 at 2:13 PM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Subject: Re: AIX client to MS RADIUS server Lloyd Gill wrote: Here is my output of the build. Not clean, but it starts to authenticate, but logs me out. Anyone have an idea on why the build produced this? They are warnings, not errors. Ignore them. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Arran, does this have to be obtained via git? Is there a compressed tar’d version of the 1.4 source? From: Arran Cudbard-Bell <a.cudbardb@freeradius.org<mailto:a.cudbardb@freeradius.org>> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Date: Wednesday, March 26, 2014 at 6:52 AM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Subject: Re: AIX client to MS RADIUS server On 26 Mar 2014, at 07:51, Arran Cudbard-Bell <a.cudbardb@freeradius.org<mailto:a.cudbardb@freeradius.org>> wrote: On 25 Mar 2014, at 22:08, Lloyd Gill <lhg@jhmi.edu<mailto:lhg@jhmi.edu>> wrote: So, to confirm, I should be working with v1.4 of the pam radius auth client, correct? Yes. If so, how can I obtain that version? git clone https://github.com/FreeRADIUS/pam_radius.git Interwebs say AIX is big endian, which unless specifically checked for, would result in the MD5 code producing incorrect hashes. Arran Cudbard-Bell <a.cudbardb@freeradius.org<mailto:a.cudbardb@freeradius.org>> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
participants (5)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Arran Cudbard-Bell -
Fajar A. Nugraha -
Lloyd Gill