From owner-freebsd-isp Wed May 31 7:43:36 2000 Delivered-To: freebsd-isp@freebsd.org Received: from galt.slap.net (galt.slap.net [206.123.11.197]) by hub.freebsd.org (Postfix) with ESMTP id 633D537BE40 for ; Wed, 31 May 2000 07:43:29 -0700 (PDT) (envelope-from wlloyd@galt.slap.net) Received: (from wlloyd@localhost) by galt.slap.net (8.9.3/8.9.3) id KAA14308; Wed, 31 May 2000 10:42:53 -0400 (EDT) (envelope-from wlloyd) Date: Wed, 31 May 2000 10:42:53 -0400 From: William Lloyd To: Troy Settle Cc: Corey Ralph , freebsd-isp@FreeBSD.ORG Subject: Re: Using radius to NT server? Message-ID: <20000531104253.C12953@galt.slap.net> References: <20000525181709.C2615@coreyx.net-tech.com.au> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2i In-Reply-To: ; from troy@picus.com on Wed, May 31, 2000 at 07:43:07 -0400 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi Troy! On Wed, 31 May 2000, Troy Settle wrote: > > Corey, > > You're not alone here. A few days ago, I tried enabling pam_radius for > authentication on 4.0-STABLE, but had 0 luck with it. I got the same > errors: No valid RADIUS response recieved. Rather frustrating when I run > Radius in debug mode, and *never* even see the connection coming in. > > I just chalked it up to either PAM or the Radius module not being quite > ready for production and moved on to other stuff. > I've not tried it with a NT radius server but the pam_radius stuff requires that a full user account be setup on the freebsd box. The pam_radius module will ignore the password part of the account and verify against the other (in your case NT) radius box. Don't think of it as a replacement for NIS/YP in this case. You might check the TCP port that radius is using. Different radius servers seem to use different default ports. I think Livingston changed the radius default port somewhere along the line a while back. -bill -- William Lloyd mailto:wlloyd@slap.net | No stuff here To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message