We are consolidating servers and moving from a BSD/OS and ICRadius setup and auth'ing via passwd file to FreeBSD. I have run into an issue with authenticating and how I should do it. Our old setup had a web interface designed 7 yrs ago, written in C, which the developer is no longer around and most of the source has gone too that we entered users into the passwd file to login via dialup. So my options are to a) move the passwd file from another machine over the network and build a new one each time or b) auth via database. Will FreeRadius auth via mySQL using the unix crypt? I have no way of adding the users into a database with their passwords. Or long way of capturing each users password from ICRadius and adding them to the database. Has anyone else converted from a passwd file to a database of some variety? Thanks for any info. Keith
Keith Woodworth <kwoody@citytel.net> wrote:
Will FreeRadius auth via mySQL using the unix crypt?
No... but it will read crypt'd passwords from the DB, and use them for authentication. I don't know anything about the ICRadius schema. The FreeRADIUS schema is pretty rigid, so integrating the two might take a bit of work. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
On Fri, 11 Aug 2006, Alan DeKok wrote: |->Keith Woodworth <kwoody@citytel.net> wrote: |->> Will FreeRadius auth via mySQL using the unix crypt? |-> |-> No... but it will read crypt'd passwords from the DB, and use them |->for authentication. Thats basically what I want, but didnt know now to express it properly. Just be able to take the username, crypted password and real name, stuff it into a database and read the database when someone dials up. Any pointers on how to setup radiusd.conf to do this? |-> I don't know anything about the ICRadius schema. The FreeRADIUS |->schema is pretty rigid, so integrating the two might take a bit of |->work. Almost the same acutally. There are few things that ICRadius keeps in a database table, such as dictionary, hints, nas info and there are a few extra table columns in FreeRadius compared to ICRadius, but overall very similiar. Even the table names are the same. Ive already got an AS5200 we had sitting around using this FR setup, but have come to the point we need to move all users to a database now for ease of use mostly and for future portability. We have one NAS left in production and only ~600 users left on dialup. The rest of our user base is DSL now. Thanks for any pointers. Keith
participants (2)
-
Alan DeKok -
Keith Woodworth