pam module / freeradius permissions

[Arran Cudbard-Bell]

On 5 Mar 2014, at 21:09, msheiny at seas.upenn.edu wrote:

> Hello,
> 
> I'm running FreeRadius 2.2.0 and am looking for advice on resolving a
> permissions issue I am running into with a third-party pam module. 
> 
> As far as freeradius goes, I have it configured how I would like -
> radius authentication is being checked against PAM as I intended. The problem
> is that this pam module I am running currently requires root permissions but I
> would prefer to keep radiusd running as a restricted user. I've
> confirmed I can get around the issue by specifying radiusd to run as
> root but this is not desired.
> 
> So my question - what would be the best way to run the freeradius pam
> sub-routine as root but keep the rest of the freeradius system runnning
> as my restricted user? I'm trying to avoid editing source code if I can
> help it. I realize this is not strictly related to freeradius but
> figured there may be a freeradius setting I'm not familiar here.

I honestly have no idea what you're talking about... how would the user
FreeRADIUS is running as have any affect on the pam module?

Arran Cudbard-Bell <a.cudbardb at freeradius.org>
FreeRADIUS Development Team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 881 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20140306/bc6a4681/attachment.pgp>