[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Pam_radius / Cucipop



I'm trying to get Cucipop to work with pam_radius (www.freeradius.org) and
only pam_radius. I installed the pam radius module and configured it. It
works, but only if the user I'm trying to login as is a user of the system
(someone in the passwd file)
For ex. this works (robert's in the passwd and waldo's not):

foobar:~$ telnet foobar 110
+OK Cubic Circle's v1.31 1998/05/13 POP3 ready <d44e0000386aff38@foobar>
user robert
+OK robert selected
pass password
+OK Congratulations!

but this doesn't:
foobar:~$ telnet foobar 110
+OK Cubic Circle's v1.31 1998/05/13 POP3 ready <d44e0000386aff38@foobar>
USER waldo
+OK waldo selected
pass password
-ERR cucipop: Invalid password or username (check case)

When I check my radius logs I can see that robert was authenticated and
waldo never made it there. My /etc/pam.d/cucipop contains only:
auth     sufficient   pam_radius_auth.so client_id=foobar

What I want is to have CUCIPOP authenticate only via radius (so users don't
have to have a passwd entry.) I'm also trying to get Sendmail to do
something similiar (no passwd entry) with LDAP. That way I can have 1 SQL
database with all my users and I can turn their accounts off at anytime.

Here is a diagram:
	  				   		   /-----LDAP -> Sendmail
MS SQL --> Radius/LDAP server (radius NT) --/
	 \				  		  \
	  \-> Billing software	               \-----Radius -> PAM -> CUCIPOP


Someone on IRC mentioned NSS and libc6.
I'm using Debian 2.2. Any help would be appreciated.

Maybe someone know's a easier way where I can directly hook into SQL
elimnating overhead.

======================================================================
Robert H. Clugston       
E-mail: robert@comstocknet.com
               
Systems Administrator                                       
Comstock Net, www.comstocknet.com
Phone: (909)877-6407
======================================================================



-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: PGPfreeware 6.5.3 for non-commercial use <http://www.pgp.com>
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=0Q3F
-----END PGP PUBLIC KEY BLOCK-----



Reply to: