Problems System Auth with FreeRadius (/etc/shadow)

Min Qiu mqiu at globalinternetworking.com
Thu Jan 26 22:16:36 CET 2006


You may read the doc wrong.  The group you should look for is 
"radiusd".  When you create user "radiusd", the group "radiusd"
should also be created if you use adduser command to do the job.
You don't what user "radiusd" belong to group "root".  Do 
"chgrp radiusd /etc/shadow".

Min

> -----Original Message-----
> From: 
> freeradius-users-bounces+mqiu=globalinternetworking.com at lists.
> freeradius.org 
> [mailto:freeradius-users-bounces+mqiu=globalinternetworking.co
> m at lists.freeradius.org] On Behalf Of Nataniel Klug
> Sent: Thursday, January 26, 2006 3:57 PM
> To: FreeRadius users mailing list
> Subject: Re: Problems System Auth with FreeRadius (/etc/shadow)
> 
> 
> Alan,
> 
> Now you have gived me a tip... At my Fedora there is no group 
> shadow, so I
> put radius to run as group "root" so it could read 
> /etc/shadow only if I set
> +r to group at shadow files.
> 
> Att,
> 
> Nataniel Klug
> 
> ----- Original Message ----- 
> From: "Alan DeKok" <aland at ox.org>
> To: "FreeRadius users mailing list" 
> <freeradius-users at lists.freeradius.org>
> Sent: Thursday, January 26, 2006 3:37 PM
> Subject: Re: Problems System Auth with FreeRadius (/etc/shadow)
> 
> 
> > "Nataniel Klug" <nata at cnett.psi.br> wrote:
> > > I just have installed the package from Fedora Core 3, 
> nothing else.
> >
> >   Then look at the configuration file.  See how it's different from
> > what is shipped with FreeRADIUS.
> >
> >   And setting "a+rw" on /etc/passwd and /etc/shadow is probaby the
> > single worst thing you can do to your system.  EVER.  Rather than
> > doing that, read raddb/radiusd.conf, it talks about issues with
> > reading /etc/shadow, and describes suggested fixes won't 
> destroy your
> > system.
> >
> >   Honestly, I don't understand why it's so hard to read the
> > configuration files.
> >
> >   Alan DeKok.
> > -
> > List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
> >
> >
> 
> - 
> List info/subscribe/unsubscribe? See 
> http://www.freeradius.org/list/users.html
> 




More information about the Freeradius-Users mailing list