Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 3 Aug 2005 23:34:19 +0100 (BST)
From:      Vince Hoffman <jhary@unsane.co.uk>
To:        "Sean P. Malone" <smalone@udallas.edu>
Cc:        FreeBSD Questions <freebsd-questions@freebsd.org>
Subject:   Re: pam_radius
Message-ID:  <20050803232734.T47324@unsane.co.uk>
In-Reply-To: <42EFBA35.2060803@udallas.edu>
References:  <42EFBA35.2060803@udallas.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.

--0-839810075-1123108459=:47324
Content-Type: TEXT/PLAIN; charset=windows-1252; format=flowed
Content-Transfer-Encoding: QUOTED-PRINTABLE



On Tue, 2 Aug 2005, Sean P. Malone wrote:

> I=92m rolling out a new email system and would love it if I could get tha=
t=20
> system to authentic the user off of our existing Active Directory user=20
> database.
>
> As I understand, the pam_radius module should enable me to achieve the ta=
sk.=20
> However, the only instructions that I=92ve been able to find are at:
>
> https://www.freebsd.uwaterloo.ca/twiki/bin/view/Freebsd/PamRadius?shin=3D=
print.patern
>
> While these are helpful, I=92m still not able to get my BSD system to=20
> authenticate against a MS IAS =96 although the attempts are logged on the=
 IAS=20
> box without error.
>
> Does anyone know of a good additional source of information?
>

I've had it working happily both against freeradius and against an ACE=20
(securid) radius server, never tried with windows, I may have a go=20
tomorrow at work.
The only thing I found was
for ssh authentication I had to have a user of that name on the freebsd=20
box, for login/telnet I could use the template_user option. I guess thats=
=20
something in ssh.
Other than that the man pages for pam_radius and radius.conf were enough=20
to get it going.

Like I said I'll have a look tomorrow if I get a chance.

Vince
> Thanks!
>
> Sean
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.o=
rg"
>
--0-839810075-1123108459=:47324--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050803232734.T47324>