Greetings, I am very new to RADIUS and PAM RADIUS. I am trying to configure PAM Radius to authenticate users on a Linux host. I would like to know, how to configure PAM Radius to authenticate users from different realms, as the current configuration doesn't seem to take realm. please help me with this as I have configured users to be part of different realms on radius server and now want to authenticate all those users to the same Linux host. thanks for all the help in advance. regards, sayan. --------------------------------- Take the Internet to Go: Yahoo!Go puts the Internet in your pocket: mail, news, photos & more.
Sayan S wrote:
Greetings, I am very new to RADIUS and PAM RADIUS. I am trying to configure PAM Radius to authenticate users on a Linux host. I would like to know, how to configure PAM Radius to authenticate users from different realms, as the current configuration doesn't seem to take realm.
You don't use realms in Unix logins.
please help me with this as I have configured users to be part of different realms on radius server and now want to authenticate all those users to the same Linux host.
You just login as "user@realm". That might work. Alan DeKok.
Thanks Alan for the quick response. I am referring to realm here, as RADIUS support realms, and we are using RADIUS to authenticate the users to Linux, so seems like we need to have all users contained in the same realm. Is having username in user@realm form a valid unix format? I was thinking the first part of the user@realm should be the unix username though the radius request is sent as user@realm. Otherwise we need to have a comprehensive RADIUS-username@realm to Unix-userid mapping. regards, sayan Alan DeKok <aland@deployingradius.com> wrote: Sayan S wrote:
Greetings, I am very new to RADIUS and PAM RADIUS. I am trying to configure PAM Radius to authenticate users on a Linux host. I would like to know, how to configure PAM Radius to authenticate users from different realms, as the current configuration doesn't seem to take realm.
You don't use realms in Unix logins.
please help me with this as I have configured users to be part of different realms on radius server and now want to authenticate all those users to the same Linux host.
You just login as "user@realm". That might work. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html --------------------------------- Park yourself in front of a world of choices in alternative vehicles. Visit the Yahoo! Auto Green Center.
On Mon 20 Aug 2007, Sayan S wrote:
Thanks Alan for the quick response. I am referring to realm here, as RADIUS support realms, and we are using RADIUS to authenticate the users to Linux, so seems like we need to have all users contained in the same realm.
Is having username in user@realm form a valid unix format? I was thinking the first part of the user@realm should be the unix username though the radius request is sent as user@realm. Otherwise we need to have a comprehensive RADIUS-username@realm to Unix-userid mapping.
I happily use username@domain.com logins on my hosting servers with an LDAP backend (not radius at present) Regards -- Peter Nixon http://peternixon.net/
participants (3)
-
Alan DeKok -
Peter Nixon -
Sayan S