From owner-freebsd-current Wed Jun 10 22:38:30 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id WAA24902 for freebsd-current-outgoing; Wed, 10 Jun 1998 22:38:30 -0700 (PDT) (envelope-from owner-freebsd-current@FreeBSD.ORG) Received: from antipodes.cdrom.com (castles69.castles.com [208.214.165.69]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id WAA24895 for ; Wed, 10 Jun 1998 22:38:27 -0700 (PDT) (envelope-from mike@antipodes.cdrom.com) Received: from antipodes.cdrom.com (localhost [127.0.0.1]) by antipodes.cdrom.com (8.8.8/8.8.5) with ESMTP id UAA00260; Wed, 10 Jun 1998 20:35:17 -0700 (PDT) Message-Id: <199806110335.UAA00260@antipodes.cdrom.com> X-Mailer: exmh version 2.0zeta 7/24/97 To: Wm Brian McCane cc: The Hermit Hacker , John Polstra , current@FreeBSD.ORG Subject: Re: Radius login via getty In-reply-to: Your message of "Wed, 10 Jun 1998 18:38:53 CDT." Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Wed, 10 Jun 1998 20:35:16 -0700 From: Mike Smith Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > > > > There is a pam_radius module out there, if you get the PAM stuff > > > > installed on your system. I'm running it successfully under Solaris 2.6 > > > > > > Do you mean the one in Linux-PAM? The pam_radius module there is > > > barely implemented. It only uses the RADIUS server for accounting. The Linux-PAM implementation does "traditional" username/password authentication (passwd, radius, tacacs, etc.) via a second layer called 'libpasswd'. > > There is a second one, found at: > > > > ftp://ftp.engr.leemah.com/pub/pam/docs > > > > I'm running it under Solaris 2.6 to authenticate against a radius server > > running on a novell server, to give us common passwords across machines... > > > > The pam/docs directory is probably not right, its just what I pulled out > > of the README file, but there is source code in there... > > > > Marc G. Fournier > > Systems Administrator @ hub.org > > primary: scrappy@hub.org secondary: scrappy@{freebsd|postgresql}.org > > > Okay, assuming PAM can do what you say it will. Can it also be used with > POP3, IMAP, FTP, Telnet, RLogin, etc. You have to rebuild all your authenticating applications, and it's not suitable for some authentication procedures, but it can be useful in some applications. -- \\ Sometimes you're ahead, \\ Mike Smith \\ sometimes you're behind. \\ mike@smith.net.au \\ The race is long, and in the \\ msmith@freebsd.org \\ end it's only with yourself. \\ msmith@cdrom.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message