From owner-freebsd-isp Thu Aug 8 12:48:19 1996 Return-Path: owner-isp Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id MAA07570 for isp-outgoing; Thu, 8 Aug 1996 12:48:19 -0700 (PDT) Received: from bitbucket.edmweb.com (bitbucket.edmweb.com [204.244.190.9]) by freefall.freebsd.org (8.7.5/8.7.3) with SMTP id MAA07555 for ; Thu, 8 Aug 1996 12:48:12 -0700 (PDT) Received: (from steve@localhost) by bitbucket.edmweb.com (8.6.12/8.6.12) id MAA00180; Thu, 8 Aug 1996 12:47:41 -0700 Date: Thu, 8 Aug 1996 12:47:39 -0700 (PDT) From: Steve Reid To: mail cc: isp@FreeBSD.ORG Subject: Re: Question - PAP Authentication In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-isp@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk > Can someone tell me how PAP works. > Is there somthing more to it than determinig whether an incoming call is > ppp or not. If this is the case would a straight ppp shell do the trick > denying the user shell access?? PAP is the Password Authentication Protocol. It's PPP's eqivalent of a login prompt. It receives a username and password during PPP negotiation, and if that matches what PPP has in it's database, the user is allowed to complete the PPP connection. You can create a small shell script that runs ppp or pppd with whatever options you need and specify that script as a login shell for a user. If you have PAP working properly, you could have all users share one passwordless account and depend on PAP to check which people are valid PPP users. You can even run pppd directly from init (by editing /etc/gettytab) and skip the login prompt altogether. For more info on setting up a FreeBSD system as a PPP server, see http://www.ssimicro.com/~jeremyc/ppp.html and whatever you can find at http://www.freebsd.org/ ===================================================================== | Steve Reid - SysAdmin & Pres, EDM Web (http://www.edmweb.com/) | | Email: steve@edmweb.com Home Page: http://www.edmweb.com/steve/ | | PGP (2048/9F317269) Fingerprint: 11C89D1CD67287E68C09EC52443F8830 | | -- Disclaimer: JMHO, YMMV, TANSTAAFL, IANAL. -- | ===================================================================:)