From owner-freebsd-questions  Wed Oct 18 20: 5:52 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from w2xo.pgh.pa.us (ipl-229-070.npt-sdsl.stargate.net [208.223.229.70])
	by hub.freebsd.org (Postfix) with ESMTP id AA44337B4D7
	for <freebsd-questions@freebsd.org>; Wed, 18 Oct 2000 20:05:50 -0700 (PDT)
Received: from w2xo.pgh.pa.us (shazam.w2xo.pgh.pa.us [192.168.5.3])
	by w2xo.pgh.pa.us (8.9.3/8.9.3) with ESMTP id DAA81420
	for <freebsd-questions@freebsd.org>; Thu, 19 Oct 2000 03:04:27 GMT
	(envelope-from durham@w2xo.pgh.pa.us)
Message-ID: <39EE9DC7.D806BAD4@w2xo.pgh.pa.us>
Date: Thu, 19 Oct 2000 03:07:51 -0400
From: Jim Durham <durham@w2xo.pgh.pa.us>
Organization: dis-
X-Mailer: Mozilla 4.75 [en] (X11; U; FreeBSD 4.1-RELEASE i386)
X-Accept-Language: en
MIME-Version: 1.0
To: freebsd-questions@freebsd.org
Subject: Radiusd with Portmaster2 on FreeBSD4.1
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

I'm using the cistron radiusd on FreeBSD 4.1 with an old Portmaster
2E to authenticate a user base of around 100 users.

The portmaster had been running on its internal user list, and worked,

I am using the default user config file and using AuthType = System so
I can use the Unix password file.

The only way that the Radius server will authenticate a user is
if they are also in the Portmaster user table. If I take the
user out of the user table on the Portmaster, radiusd rejects the
authentication. I see this running radiusd in the "-x -x" mode.

Yes, I have the authentication server and accounting server
values on the Portmaster pointing to the IP of the radius box.
I have CHAP and PAP off. One clue is that radiusd reports
that it is handed a CHAP password by the Portmaster, even
though CHAP is off. This does not happen when the user is
in the portmaster user table and is authenticated.

I have read all the docs and the manuals on the Livingston site.

Anyone know what's going on here?

-Jim Durham


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message