Any PAM authentication module with libradius(3)?
Hello, Somebody knows why pam_radius_auth authentication module doesn't use libradius(3) for grater flexibility? There is any equivalent PAM authentication module available that relays on libradius(3)? Best Regards Mugur
ABULIUS, MUGUR (MUGUR) wrote:
Hello, Somebody knows why pam_radius_auth authentication module doesn’t use libradius(3) for grater flexibility?
Because it was written before the RADIUS libraries. And what "greater flexibility" do you want?
There is any equivalent PAM authentication module available that relays on libradius(3)?
No. Alan DeKok.
ABULIUS, MUGUR (MUGUR) wrote:
And what "greater flexibility" do you want?
Something like client <hostname|ip-address|ip-network> { <attribute> = <value> } that is specified like for clients.conf
Uh... the PAM library is a client. So having a "client" definition doesn't make sense. And nothing in the "clients.conf" file lets you set *radius* attributes. Perhaps you could explain what you want to *do* with the changes. Simply saying "allow more complex config files" isn't useful. Alan DeKok.
I was thinking, but I have wrong, that is possible to specify different authentication methods that are also supported by the FreeRadius server (e.g. CHAP). I realize that this is not true and I looking now to "eapol_test" program from wpa_supplicant. Sorry for wasting your time Best Regards Mugur -----Original Message----- From: freeradius-users-bounces+mugur.abulius=alcatel-lucent.com@lists.freeradius.org [mailto:freeradius-users-bounces+mugur.abulius=alcatel-lucent.com@lists.freeradius.org] On Behalf Of Alan DeKok Sent: mardi 20 juillet 2010 19:10 To: FreeRadius users mailing list Subject: Re: Any PAM authentication module with libradius(3)? ABULIUS, MUGUR (MUGUR) wrote:
And what "greater flexibility" do you want?
Something like client <hostname|ip-address|ip-network> { <attribute> = <value> } that is specified like for clients.conf
Uh... the PAM library is a client. So having a "client" definition doesn't make sense. And nothing in the "clients.conf" file lets you set *radius* attributes. Perhaps you could explain what you want to *do* with the changes. Simply saying "allow more complex config files" isn't useful. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
ABULIUS, MUGUR (MUGUR) -
Alan DeKok