1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
|
PAM Support for Cistron-radiusd
0. INTRODUCTION
PAM support was done by Jeph Blaize. Miguel a.l. Paraz <map@iphil.net>
ported it to Cistron-Radius. Chris Dent <cdent@kiva.net> added the
Pam-Auth attribute. It is not complete yet but seems to work
(for authentication only).
1. USAGE
Use Auth-Type = Pam in the users file. For backwards compatibility,
you can also use Password = "PAM" but, like Password = "UNIX", this
is depreciated.
You can also use ``Pam-Auth = "somestring"'' to specify an entry in
/etc/pam.d. The default is "radius".
Please look at the file ../redhat/radiusd-pam for a sample PAM
entry. This script should be copied to /etc/pam.d/radius
2. NOTES
Added the following hacks, see PAM/PAMLIB in src/Makefile to activate.
Crude support for PAM authentication (-DPAM), User-Password = "PAM".
Miguel has made PAM changes to the Cistron radiusd, since he now uses
it as the basis of many accounting systems. However, according to the
PAM experts, calling the pam_start function for each user to be
authenticated is a bad idea. Seems to work for him, though.
Besides, the Pam-Auth attribute only works if pam_start is called
everytime anyways ..
3. TODO:
Real PAM support, figure out how we can write a module that will make
it blend in with PAM more seamlessly. With this, we can replace the
DENY_SHELL with something more flexible such as a database.
4. EXAMPLE:
DEFAULT Auth-Type = Pam, NAS-IP-Address = 206.97.64.5
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-IP-Address = 255.255.255.254,
Filter-Id = "std.ppp",
Framed-MTU = 1500,
Framed-Compression = Van-Jacobson-TCP-IP
DEFAULT Auth-Type = Pam, Pam-Auth = "radius2", NAS-IP-Address = 127.0.0.1
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-IP-Address = 255.255.255.254,
Filter-Id = "std.ppp",
Framed-MTU = 1500,
Framed-Compression = Van-Jacobson-TCP-IP
$Id: README.pam,v 1.4 2002/02/16 11:47:49 npicone Exp $
|
