PAM: change user's passwords in the Freeradius server
Dear, I have a Freeradius/Mysql server that authenticates SSH logins from Debian machines. In the Freeradius I add the user and password basically, and in each Debian machine I have installed the libpam-radius-auth package in order to execute SSH and SUDO, all authenticating against the Freeradius server. But now I want the Debian machines' users to change their passwords with the "passwd" command in the MySQL database from Freeradius, but after editing the file /etc/pam.d/passwd as follow: password sufficient pam_radius_auth.so debug @include common-password the users can't change their passwords at all in the Freeradius server. As I said, the SSH login and SUDO command work perfectly authenticating against Freeradius, this is my /etc/pam.d/sudo file: auth required pam_radius_auth.so debug account required pam_radius_auth.so debug password required pam_radius_auth.so debug How can I edit the /etc/pam.d/passwd file in order to let users to change Freeradius passwords??? Thanks a lot, Roberto
Roberto Carna wrote:
But now I want the Debian machines' users to change their passwords with the "passwd" command in the MySQL database from Freeradius, but after editing the file /etc/pam.d/passwd as follow:
password sufficient pam_radius_auth.so debug @include common-password
the users can't change their passwords at all in the Freeradius server.
The RADIUS protocol doesn't support password changing.
How can I edit the /etc/pam.d/passwd file in order to let users to change Freeradius passwords???
It's impossible. Alan DeKok.
In this case, what is the reason of the existence of the /etc/pam.d/passwd file ??? Are you sure it's impossible ??? Thanks again. 2014-10-16 14:42 GMT-03:00 Alan DeKok <aland@deployingradius.com>:
Roberto Carna wrote:
But now I want the Debian machines' users to change their passwords with the "passwd" command in the MySQL database from Freeradius, but after editing the file /etc/pam.d/passwd as follow:
password sufficient pam_radius_auth.so debug @include common-password
the users can't change their passwords at all in the Freeradius server.
The RADIUS protocol doesn't support password changing.
How can I edit the /etc/pam.d/passwd file in order to let users to change Freeradius passwords???
It's impossible.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Roberto Carna wrote:
In this case, what is the reason of the existence of the /etc/pam.d/passwd file ???
That is a file managed by PAM. Not by RADIUS. *Other* PAM modules can change passwords. e.g. pam_ldap.
Are you sure it's impossible ???
Do you think I'm lying to you? It's impossible. Stop being rude, and find another solution. Alan DeKok.
Ha ha haaa....what a piece of asshole !!!! 2014-10-16 14:56 GMT-03:00 Alan DeKok <aland@deployingradius.com>:
Roberto Carna wrote:
In this case, what is the reason of the existence of the /etc/pam.d/passwd file ???
That is a file managed by PAM. Not by RADIUS.
*Other* PAM modules can change passwords. e.g. pam_ldap.
Are you sure it's impossible ???
Do you think I'm lying to you?
It's impossible. Stop being rude, and find another solution.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Robert Carna Do you even have idea who you are talking to? He wrote FreeRADIUS. Writing such non sense is very easy. Show your skills to modify the source to make it work. On Thu, Oct 16, 2014 at 6:08 PM, Alan DeKok <aland@deployingradius.com> wrote:
Roberto Carna wrote:
Ha ha haaa....what a piece of asshole !!!!
Congratulations. You've earned a permanent ban from the mailing list.
Don't re-subscribe.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Alan DeKok -
Roberto Carna -
Russell Mike