Date: Thu, 5 Jul 2012 19:19:15 -0400 (EDT) From: "Brett E. Wynkoop" <wynkoop@wa3yre.wynn.com> To: FreeBSD-gnats-submit@FreeBSD.org Subject: bin/169670: [pam] template_user is broken in pam_radius Message-ID: <201207052319.q65NJFeS046604@mail.wynn.com> Resent-Message-ID: <201207052340.q65Ne0LR077632@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 169670
>Category: bin
>Synopsis: [pam] template_user is broken in pam_radius
>Confidential: no
>Severity: critical
>Priority: high
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Thu Jul 05 23:40:00 UTC 2012
>Closed-Date:
>Last-Modified:
>Originator: Brett E. Wynkoop
>Release: FreeBSD 7.3-STABLE i386 Through 9.0-RELEASE
>Organization:
>Environment:
System: FreeBSD dt0.int.harapartners.com 9.0-RELEASE FreeBSD 9.0-RELEASE #1: Wed Apr 11 11:50:56 EDT 2012 root@dt0.int.harapartners.com:/sys/amd64/compile/DT0-DUAL-VIDEO amd64
>Description:
Use of the template user causes pam_radius to always reture
authentication failure. Auth has been tested using radtest and radlogin from
the same host that pam_radius is failing on.
>How-To-Repeat:
configure pam_radius for use with a template user then attempt to log in
as a user not on the local system, but with good radius credentials.
You should also look at pr-66095. It seems that pr was closed without
any fix, but it gives very good full details of the issue. I have tested on
FreeBSD 7.x and FreeBSD 9.0 with the same results. Not having working a working
FreeBSD radius client configuration is very painful for large sites that have
radius servers!
>Fix:
No Idea.
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201207052319.q65NJFeS046604>