Hi. How to set up freeradius on redhat 4 to use etc_passwd? I'm new in freeradius, so please forgive me a lamer question. KG
On 07/28/2009 11:39 AM, Kaz Zurad wrote:
Hi. How to set up freeradius on redhat 4 to use etc_passwd?
I'm new in freeradius, so please forgive me a lamer question.
First of all there is no such thing as redhat 4. Did you mean RHEL 4? Fedora 4? Anyway, it doesn't matter, just clarifying. You don't want to read /etc/passwd or /etc/shadow directly so don't use rlm_unix, instead you should use rlm_pam. When configuring any module in FreeRADIUS always read the documentation in /etc/raddb/modules. For the case of of pam you'll see that all it does is define the pam configuration file to use (e.g. /etc/pam.d/radiusd). Red Hat RPM's ship with the /etc/pam.d/radiusd file, although you may want to tweak it to your site. -- John Dennis <jdennis@redhat.com> Looking to carve out IT costs? www.redhat.com/carveoutcosts/
Thank you. I meant RHEL 4. I will try to install and implement it. On Tue, Jul 28, 2009 at 11:02 AM, John Dennis<jdennis@redhat.com> wrote:
On 07/28/2009 11:39 AM, Kaz Zurad wrote:
Hi. How to set up freeradius on redhat 4 to use etc_passwd?
I'm new in freeradius, so please forgive me a lamer question.
First of all there is no such thing as redhat 4. Did you mean RHEL 4? Fedora 4? Anyway, it doesn't matter, just clarifying.
You don't want to read /etc/passwd or /etc/shadow directly so don't use rlm_unix, instead you should use rlm_pam.
When configuring any module in FreeRADIUS always read the documentation in /etc/raddb/modules. For the case of of pam you'll see that all it does is define the pam configuration file to use (e.g. /etc/pam.d/radiusd). Red Hat RPM's ship with the /etc/pam.d/radiusd file, although you may want to tweak it to your site.
-- John Dennis <jdennis@redhat.com>
Looking to carve out IT costs? www.redhat.com/carveoutcosts/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Tue, 28 Jul 2009, Kaz Zurad wrote:
Thank you. I meant RHEL 4. I will try to install and implement it.
I am using CentOS 4 which is the 'free' version of RHEL 4, You should be able to install the freeradius rpm package via yum (or perhaps already installed with initial install). You don't need to install a more recent version unless you are doing something complicated that needs newer features. Though please undertand that most people on this list know solutions for the newer versions and if you want serious help with things like 'EAP' and 'LDAP' you may need to upgrade. But to just do 'simple' authentication from etc_passwd..... /etc/raddb/radiusd.conf needs to be reviewed for things like server IP address and port, etc, but should pretty much work 'out of the box'. /etc/raddb/clients.conf needs an entry listing your NAS (eg. Cisco AS5300) with the 'secret' (password) it will use to talk to radius, To use etc_passwd for authentication, in the /etc/raddb/users file, uncomment and edit the entries (well commented!) that show how to configure a 'default' user with 'Auth-Type = System'. Yes, that easy! - Charles
Than you.I'm going to set up freeradius not only for cisco firewall but for wireless conn. What I also need to know to correctly confugure freeradius. On Tue, Jul 28, 2009 at 12:20 PM, Charles Gregory<cgregory@hwcn.org> wrote:
On Tue, 28 Jul 2009, Kaz Zurad wrote:
Thank you. I meant RHEL 4. I will try to install and implement it.
I am using CentOS 4 which is the 'free' version of RHEL 4,
You should be able to install the freeradius rpm package via yum (or perhaps already installed with initial install). You don't need to install a more recent version unless you are doing something complicated that needs newer features. Though please undertand that most people on this list know solutions for the newer versions and if you want serious help with things like 'EAP' and 'LDAP' you may need to upgrade.
But to just do 'simple' authentication from etc_passwd.....
/etc/raddb/radiusd.conf needs to be reviewed for things like server IP address and port, etc, but should pretty much work 'out of the box'.
/etc/raddb/clients.conf needs an entry listing your NAS (eg. Cisco AS5300) with the 'secret' (password) it will use to talk to radius,
To use etc_passwd for authentication, in the /etc/raddb/users file, uncomment and edit the entries (well commented!) that show how to configure a 'default' user with 'Auth-Type = System'.
Yes, that easy!
- Charles - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Than you.I'm going to set up freeradius not only for cisco firewall but for wireless conn. What I also need to know to correctly confugure freeradius.
That you shouldn't bother setting up wireless with 1.0.1. Upgrade. http://wiki.freeradius.org/Red_Hat_FAQ Ivan Kalik Kalik Informatika ISP
I tried to do it, but no success. I'm also use this http://www.howtoforge.org/authentication-authorization-and-accounting-with-f... but... the same. No success. On Tue, Jul 28, 2009 at 3:20 PM, Ivan Kalik<tnt@kalik.net> wrote:
Than you.I'm going to set up freeradius not only for cisco firewall but for wireless conn. What I also need to know to correctly confugure freeradius.
That you shouldn't bother setting up wireless with 1.0.1. Upgrade.
http://wiki.freeradius.org/Red_Hat_FAQ
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Than you, John, for the clue. But I have another question. For RHEL4 is only available version 1.0.1. Can I use version dedicated for Fedora from this site http://koji.fedoraproject.org? On Tue, Jul 28, 2009 at 11:02 AM, John Dennis<jdennis@redhat.com> wrote:
On 07/28/2009 11:39 AM, Kaz Zurad wrote:
Hi. How to set up freeradius on redhat 4 to use etc_passwd?
I'm new in freeradius, so please forgive me a lamer question.
First of all there is no such thing as redhat 4. Did you mean RHEL 4? Fedora 4? Anyway, it doesn't matter, just clarifying.
You don't want to read /etc/passwd or /etc/shadow directly so don't use rlm_unix, instead you should use rlm_pam.
When configuring any module in FreeRADIUS always read the documentation in /etc/raddb/modules. For the case of of pam you'll see that all it does is define the pam configuration file to use (e.g. /etc/pam.d/radiusd). Red Hat RPM's ship with the /etc/pam.d/radiusd file, although you may want to tweak it to your site.
-- John Dennis <jdennis@redhat.com>
Looking to carve out IT costs? www.redhat.com/carveoutcosts/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Tue, 28 Jul 2009, Kaz Zurad wrote:
Than you, John, for the clue. But I have another question. For RHEL4 is only available version 1.0.1. Can I use version dedicated for Fedora from this site http://koji.fedoraproject.org?
You should find your version sufficient for simple needs. Otherwise, I highly recommend installing the latest version directly form source so that any advice you get here is going to 'apply' to you. :) - Charles
I had set it up that way - it uses the *NIX password file by default unless you specify otherwise. I can verify and check back with you if you like? G On Tue, Jul 28, 2009 at 11:39, Kaz Zurad <kajko.group@gmail.com> wrote:
Hi. How to set up freeradius on redhat 4 to use etc_passwd?
I'm new in freeradius, so please forgive me a lamer question. KG - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Glen, if you don't mind... I'll glad On Tue, Jul 28, 2009 at 12:17 PM, Glen Millard<glenmillard@gmail.com> wrote:
I had set it up that way - it uses the *NIX password file by default unless you specify otherwise. I can verify and check back with you if you like? G
On Tue, Jul 28, 2009 at 11:39, Kaz Zurad <kajko.group@gmail.com> wrote:
Hi. How to set up freeradius on redhat 4 to use etc_passwd?
I'm new in freeradius, so please forgive me a lamer question. KG - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (5)
-
Charles Gregory -
Glen Millard -
Ivan Kalik -
John Dennis -
Kaz Zurad