Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 5 Jan 2011 15:32:17 -0500
From:      Bill Moran <wmoran@potentialtech.com>
To:        gahn <ipfreak@yahoo.com>
Cc:        freebsd general questions <freebsd-questions@freebsd.org>
Subject:   Re: freebsd and
Message-ID:  <20110105153217.018bd21a.wmoran@potentialtech.com>
In-Reply-To: <534524.62805.qm@web130203.mail.mud.yahoo.com>
References:  <534524.62805.qm@web130203.mail.mud.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help

(don't see why this was on -current)

In response to gahn <ipfreak@yahoo.com>:
> hi all:
> 
> i set up the freeradius 21.100.1 on freebsd 8.1. it uses local authentication database of /etc/passwd (thanks to the previous discussions alan did with others). the problem is: it only works with the condition of the server id running as "root" instead of "freeradius" due to the one way MD5 hash of /etc/passwd file.
> 
> are there any other better ways to implement this?

a) Put the Radius server in a jail, so it can run as root without all the
   security concerns.
b) Use something other than /etc/passwd authentication

-- 
Bill Moran
http://www.potentialtech.com
http://people.collaborativefusion.com/~wmoran/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20110105153217.018bd21a.wmoran>