Hi, I have been trying to set up the pam_radius_auth pam module to authenticate my users through my freeradius server. The radius server is working fine as I can get and Access-Accept packet with radtest and also my wireless hotspot authenticates fine through it. The problem I have is that pam seems to be having a problem loading the module. The auth.log shows the following: Apr 15 22:03:51 bill sshd[7861]: PAM unable to dlopen(/lib/security/pam_radius_auth.so) Apr 15 22:03:51 bill sshd[7861]: PAM [dlerror: /lib/security/pam_radius_auth.so: undefined symbol: __stack_chk_fail_local] Apr 15 22:03:51 bill sshd[7861]: PAM adding faulty module: /lib/security/pam_radius_auth.so I am running pam_radius_auth 1.3.16 and freeradius 1.1.6 on Ubuntu 6.10 The pam_radius_auth module seems to be quite old, does anyone know if it still works? Regards, Daniel Davis
daniel wrote:
Apr 15 22:03:51 bill sshd[7861]: PAM unable to dlopen(/lib/security/pam_radius_auth.so) Apr 15 22:03:51 bill sshd[7861]: PAM [dlerror: /lib/security/pam_radius_auth.so: undefined symbol: __stack_chk_fail_local]
You've built the module with stack overflow checking turned on, and haven't linked it (or SSH) to the necessary library. How to fix this depends on your local system.
Apr 15 22:03:51 bill sshd[7861]: PAM adding faulty module: /lib/security/pam_radius_auth.so
I am running pam_radius_auth 1.3.16 and freeradius 1.1.6 on Ubuntu 6.10
The pam_radius_auth module seems to be quite old, does anyone know if it still works?
A new release should be out shortly. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Alan, Thankyou, how do I build the module with stack overflow checking turned off, also what library do I need to link it to? Regards, Daniel Davis On Mon, 16 Apr 2007 11:15:59 +0200, Alan DeKok <aland@deployingradius.com> wrote:
daniel wrote:
Apr 15 22:03:51 bill sshd[7861]: PAM unable to dlopen(/lib/security/pam_radius_auth.so) Apr 15 22:03:51 bill sshd[7861]: PAM [dlerror: /lib/security/pam_radius_auth.so: undefined symbol: __stack_chk_fail_local]
You've built the module with stack overflow checking turned on, and haven't linked it (or SSH) to the necessary library.
How to fix this depends on your local system.
Apr 15 22:03:51 bill sshd[7861]: PAM adding faulty module: /lib/security/pam_radius_auth.so
I am running pam_radius_auth 1.3.16 and freeradius 1.1.6 on Ubuntu 6.10
The pam_radius_auth module seems to be quite old, does anyone know if it still works?
A new release should be out shortly.
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
daniel wrote:
Thankyou, how do I build the module with stack overflow checking turned off, also what library do I need to link it to?
I have no idea. Stack checking is part of your local system, not part of the module. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Alan, I dont know if someone could help me, i got FR working and authenticating in my AD. Here in my core switch a (Cisco 4507R) i have around 7 vlans, i was wondering if someone could explain to me how could i use FR and my switch to use a different vlan based in the user, and if is a guest user to send to a guest vlan Since now my thanks Robinson Santos Network Administrator Fundação Joao Paulo II www.cancaonova.com São Paulo, Brasil On 4/16/07, Alan DeKok <aland@deployingradius.com> wrote:
daniel wrote:
Thankyou, how do I build the module with stack overflow checking turned off, also what library do I need to link it to?
I have no idea. Stack checking is part of your local system, not part of the module.
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Alan, I am trying to set up unix authentication using radius. Does the pam module support the maximum session times. I am trying to set up a system where linux users authenticate against my existing radius hotspot system and they are forced to log out when their session expires. Regards, Daniel Davis On Mon, 16 Apr 2007 11:15:59 +0200, Alan DeKok <aland@deployingradius.com> wrote:
daniel wrote:
Apr 15 22:03:51 bill sshd[7861]: PAM unable to dlopen(/lib/security/pam_radius_auth.so) Apr 15 22:03:51 bill sshd[7861]: PAM [dlerror: /lib/security/pam_radius_auth.so: undefined symbol: __stack_chk_fail_local]
You've built the module with stack overflow checking turned on, and haven't linked it (or SSH) to the necessary library.
How to fix this depends on your local system.
Apr 15 22:03:51 bill sshd[7861]: PAM adding faulty module: /lib/security/pam_radius_auth.so
I am running pam_radius_auth 1.3.16 and freeradius 1.1.6 on Ubuntu 6.10
The pam_radius_auth module seems to be quite old, does anyone know if it still works?
A new release should be out shortly.
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
daniel wrote:
I am trying to set up unix authentication using radius. Does the pam module support the maximum session times.
No, because PAM has no provisions for enforcing maximum session times. The setrlimit function call can enforce CPU time restrictions, but that is *not* clock time. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Has anyone had any luck compiling pam_radius_auth on ubuntu? On Mon, 16 Apr 2007 15:13:49 +0200, Alan DeKok <aland@deployingradius.com> wrote:
daniel wrote:
I am trying to set up unix authentication using radius. Does the pam module support the maximum session times.
No, because PAM has no provisions for enforcing maximum session times.
This is ok, I can write a script that runs every minute that just logs the user off based on the results of an sql query of the radius database. Does the pam module support accounting packets (ie. send accounting packet to radius when user logs on?)
The setrlimit function call can enforce CPU time restrictions, but that is *not* clock time.
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
daniel wrote:
Has anyone had any luck compiling pam_radius_auth on ubuntu?
$ apt-get install libpam0g-dev $ cd pam_radius $ make
Does the pam module support accounting packets (ie. send accounting packet to radius when user logs on?)
Yes. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
participants (3)
-
Alan DeKok -
daniel -
robinson santos